Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.CreditsDrew Webber (mcdruid)Stephen Mustgrave (smustgrave)Greg Knaddison (greggles)Drew Webber (mcdruid)Jess (xjm)Referenceshttps://www.drupal.org/sa-contrib-2026-050
