Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.Referenceshttp://help.plot.ly/security-advisories/2016-08-08-plotlyjs-xss-advisory/