CVE-2020-28479 The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function

Description

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

Affected products and versions

Product	Affected versions	Fixed in
jointjs 3.3	earliest → < 3.3.0	3.3.0

Other CVEs of jointjs

The 3 CVEs of jointjs →

CVE-2021-23444 This affects the package jointjs before 3.4.2 5.6 Medium CVE-2020-28480 The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath… 7.3 High