CVE-2019-18841

Publication date

2019-11-11 00:05:37

Family

mitre

State

PUBLISHED

Description

Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.