Morris.js Project Morris.js — known CVE vulnerabilities
Every CVE whose affected-product data names Morris.js Project Morris.js, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2017-16022 — CVSS 6.1 (medium): Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions…