🔐 CVE Alert

CVE-2026-55810

HIGH 8.1

Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050

CVSS Score
8.1
EPSS Score
0.2%
EPSS Percentile
6th

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

CWE CWE-915
Vendor drupal
Product plotly.js graphing
Ecosystems
Industries
WebMedia
Published Jul 10, 2026
Last Updated Jul 13, 2026
Stay Ahead of the Next One

Get instant alerts for drupal plotly.js graphing

Be the first to know when new high vulnerabilities affecting drupal plotly.js graphing are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Plotly.js Graphing
0.0.0 < 3.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-050

Credits

Drew Webber (mcdruid) Stephen Mustgrave (smustgrave) Greg Knaddison (greggles) Drew Webber (mcdruid) Jess (xjm)