Skip to content

[Snyk] Upgrade plotly.js from 1.41.3 to 1.58.5 - #2

Open
pushkar1923 wants to merge 1 commit into
masterfrom
snyk-upgrade-ae8f1a5988e97beb8ba4476a80c8dda7
Open

[Snyk] Upgrade plotly.js from 1.41.3 to 1.58.5#2
pushkar1923 wants to merge 1 commit into
masterfrom
snyk-upgrade-ae8f1a5988e97beb8ba4476a80c8dda7

Conversation

@pushkar1923

@pushkar1923pushkar1923 commented Sep 5, 2025

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade plotly.js from 1.41.3 to 1.58.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 66 versions ahead of your current version.

  • The recommended version was released 4 years ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityArbitrary Code Execution
SNYK-JS-STATICEVAL-173693		372No Known Exploit
high severityArbitrary Code Execution
SNYK-JS-STATICEVAL-173693		372No Known Exploit
high severityArbitrary Code Execution
npm:static-eval:20171016		372Mature
high severityImproper Input Validation
SNYK-JS-URLPARSE-543307		372Proof of Concept
high severityOpen Redirect
npm:url-parse:20180731		372Mature
high severityPrototype Override
npm:querystringify:20180419		372No Known Exploit
high severityPrototype Pollution
SNYK-JS-AJV-584908		372No Known Exploit
high severityUninitialized Memory Exposure
SNYK-JS-BL-608877		372Proof of Concept
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076		372Proof of Concept
high severityArbitrary Code Execution
SNYK-JS-JSYAML-174129		372No Known Exploit
high severityCode Injection
SNYK-JS-LODASH-1040724		372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-450202		372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-567746		372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-608086		372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-6139239		372Proof of Concept
high severityPrototype Pollution
SNYK-JS-LODASH-73638		372Proof of Concept
high severityDirectory Traversal
SNYK-JS-MOMENT-2440688		372No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251		372No Known Exploit
medium severityArbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984		372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		372Proof of Concept
medium severityMissing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		372Proof of Concept
medium severityPrototype Pollution
SNYK-JS-JQUERY-174006		372Mature
medium severityCross-site Scripting (XSS)
SNYK-JS-JQUERY-565129		372Mature
medium severityCross-site Scripting (XSS)
SNYK-JS-JQUERY-567880		372Mature
medium severityDenial of Service (DoS)
SNYK-JS-JSYAML-173999		372No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		372Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		372No Known Exploit
medium severityPrototype Pollution
SNYK-JS-MINIMIST-559764		372Proof of Concept
medium severityPrototype Pollution
SNYK-JS-MINIMIST-559764		372Proof of Concept
medium severityPrototype Pollution
SNYK-JS-MINIMIST-559764		372Proof of Concept
medium severityInformation Exposure
SNYK-JS-NODEFETCH-2342118		372No Known Exploit
medium severityDenial of Service
SNYK-JS-NODEFETCH-674311		372No Known Exploit
low severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		372Proof of Concept
low severityPrototype Pollution
SNYK-JS-MINIMIST-2429795		372Proof of Concept
low severityPrototype Pollution
SNYK-JS-MINIMIST-2429795		372Proof of Concept
low severityPrototype Pollution
SNYK-JS-MINIMIST-2429795		372Proof of Concept
low severityRegular Expression Denial of Service (ReDoS)
npm:moment:20170905		372No Known Exploit
Release notes
Package name: plotly.js
  • 1.58.5 - 2021-07-06

    Fixed

    • Fix to improve sanitizing href inputs for SVG and HTML text elements [#5803]
  • 1.58.4 - 2020-12-21

    Fixed

    • Fix preserveDrawingBuffer WebGL config for displaying transparent gl3d scenes
      on Apple devices running latest Safari versions (v13 and higher) [#5351]
    • Fix spelling [#5349, #5356] with thanks to @ jbampton for the contribution!
  • 1.58.3 - 2020-12-17

    Fixed

    • Fix autorange for inside tick label positions [#5332]
    • Fix "nonnegative" and "tozero" rangemode for inside tick label positions
      (regression introduced in 1.58.2) [#5331]
    • Fix missing categories and tick labels on react updates
      (regression introduced in 1.54.6) [#5345]
    • Fix to avoid "autoscale" error when axis autorange is set to false
      (regression introduced in 1.42.0) [#5336]
  • 1.58.2 - 2020-12-09
  • 1.58.1 - 2020-12-04
  • 1.58.0 - 2020-12-02
  • 1.57.1 - 2020-10-20
  • 1.57.0 - 2020-10-15
  • 1.56.0 - 2020-09-30
  • 1.55.2 - 2020-09-08
  • 1.55.1 - 2020-09-03
  • 1.55.0 - 2020-09-02
  • 1.54.7 - 2020-07-23
  • 1.54.6 - 2020-07-09
  • 1.54.5 - 2020-06-23
  • 1.54.4 - 2020-06-22
  • 1.54.3 - 2020-06-16
  • 1.54.2 - 2020-06-10
  • 1.54.1 - 2020-05-04
  • 1.54.0 - 2020-04-30
  • 1.53.0 - 2020-03-31
  • 1.52.3 - 2020-03-02
  • 1.52.2 - 2020-02-03
  • 1.52.1 - 2020-01-13
  • 1.52.0 - 2020-01-08
  • 1.51.3 - 2019-12-16
  • 1.51.2 - 2019-11-25
  • 1.51.1 - 2019-11-04
  • 1.51.0 - 2019-10-29
  • 1.50.1 - 2019-10-15
  • 1.50.0 - 2019-10-07
  • 1.49.5 - 2019-09-18
  • 1.49.4 - 2019-08-22
  • 1.49.3 - 2019-08-20
  • 1.49.2 - 2019-08-13
  • 1.49.1 - 2019-07-31
  • 1.49.0 - 2019-07-24
  • 1.48.3 - 2019-06-13
  • 1.48.2 - 2019-06-11
  • 1.48.1 - 2019-05-30
  • 1.48.0 - 2019-05-28
  • 1.47.4 - 2019-04-25
  • 1.47.3 - 2019-04-18
  • 1.47.2 - 2019-04-15
  • 1.47.1 - 2019-04-10
  • 1.47.0 - 2019-04-09
  • 1.46.1 - 2019-04-02
  • 1.46.0 - 2019-04-01
  • 1.45.3 - 2019-03-19
  • 1.45.2 - 2019-03-07
  • 1.45.1 - 2019-03-05
  • 1.45.0 - 2019-02-26
  • 1.44.4 - 2019-02-12
  • 1.44.3 - 2019-02-06
  • 1.44.2 - 2019-02-04
  • 1.44.1 - 2019-01-24
  • 1.44.0 - 2019-01-22
  • 1.43.2 - 2019-01-08
  • 1.43.1 - 2018-12-21
  • 1.43.0 - 2018-12-19
  • 1.42.5 - 2018-11-08
  • 1.42.4 - 2018-11-07
  • 1.42.3 - 2018-11-06
  • 1.42.2 - 2018-11-01
  • 1.42.1 - 2018-10-31
  • 1.42.0 - 2018-10-29
  • 1.41.3 - 2018-09-25
from plotly.js GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade plotly.js from 1.41.3 to 1.58.5
4b31c65
Snyk has created this PR to upgrade plotly.js from 1.41.3 to 1.58.5.
See this package in npm:
plotly.js
See this project in Snyk:
https://app.snyk.io/org/pushkar.choupane/project/1e4b36a8-f5bd-4cb0-86fc-fcc1029ff54d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@pushkar1923@snyk-bot