Skip to content
Heist/ feed
Back to feed
Critical

Security advisory

Type: advisorySources: OSVCVE: CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2020-7746
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 11:30 UTC · Revision 1

Source evidence

CVE-2020-7746

core-osv · Original source

Published 29 Oct 2020, 08:15 UTC

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

osv:CVE-2020-7746
Complete source record
{
  "id": "d1aa72524fff4edceb080833e5b97dec90aa05dcfb0aa15934cea8cee2744973",
  "url": "https://osv.dev/vulnerability/CVE-2020-7746",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2020-7746",
    "summary": "This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.",
    "evidence": "osv:CVE-2020-7746",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2020-7746",
      "aliases": [
        "CVE-2020-7746",
        "GHSA-h68q-55jf-x68w"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/chartjs/chart.js",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "9bd4cf82fda9f50a5fb50b72843e06ab88124278"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:chartjs:chart.js:*:*:*:*:*:node.js:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "2.9.4"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v2.2.2",
            "v2.2.1",
            "v2.2.0",
            "v2.2.0-rc.2",
            "v2.2.0-rc.1",
            "v2.1.6",
            "v2.1.5",
            "v2.1.4",
            "v2.1.3",
            "v2.1.2",
            "v2.1.1",
            "2.1.0",
            "v1.1.1",
            "v1.1.0",
            "v1.0.2",
            "v1.0.1",
            "v1.0.1-beta.4",
            "v1.0.1-beta.3",
            "v1.0.1-beta.2",
            "v1.0.1-beta",
            "v1.0.0-beta",
            "v0.2.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7746.json"
          }
        }
      ],
      "modified": "2026-10-20T10:54:24.876028702Z",
      "provider": "osv",
      "references": [
        "https://github.com/chartjs/Chart.js/pull/7920",
        "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1019375",
        "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCHARTJS-1019376",
        "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019374",
        "https://snyk.io/vuln/SNYK-JS-CHARTJS-1018716"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2020-7746",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 385323,
  "published_at": "2020-10-29T08:15:12.007+00:00"
}