CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55810

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 15.4%

CVSS Severity

CVSS v3 Score 8.1

References

https://www.drupal.org/sa-contrib-2026-050

Products affected by CVE-2026-55810

Plotly » Plotly.js Graphing » Version: 1.1

cpe:2.3:a:plotly:plotly.js_graphing:1.1
Plotly » Plotly.js Graphing » Version: 1.2

cpe:2.3:a:plotly:plotly.js_graphing:1.2
Plotly » Plotly.js Graphing » Version: 1.3

cpe:2.3:a:plotly:plotly.js_graphing:1.3
Plotly » Plotly.js Graphing » Version: 1.4

cpe:2.3:a:plotly:plotly.js_graphing:1.4
Plotly » Plotly.js Graphing » Version: 1.5

cpe:2.3:a:plotly:plotly.js_graphing:1.5
Plotly » Plotly.js Graphing » Version: 1.6

cpe:2.3:a:plotly:plotly.js_graphing:1.6
Plotly » Plotly.js Graphing » Version: 3.0.0

cpe:2.3:a:plotly:plotly.js_graphing:3.0.0
Plotly » Plotly.js Graphing » Version: 3.0.1

cpe:2.3:a:plotly:plotly.js_graphing:3.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55810

Products

Pricing

Contact Us