CVE-2020-28479

7.5 highEPSS 2.1%

High (7.5) in jointjs jointjs. EPSS 2.1% chance of exploitation in the next 30 days. Fixed in jointjs 3.3.0.

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
Published: 2021-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-cq8r-fc3q-6hg2	npm	jointjs	<3.3.0	3.3.0