billboard.js Prototype Pollution Vulnerability Allowing Arbitrary Code Execution or Denial-of-Service

A prototype pollution vulnerability has been identified in billboard.js versions prior to 3.15.1. The issue arises in the 'generate' function, where attackers can inject arbitrary properties, potentially leading to the execution of arbitrary code or causing a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in prototype pollution, allowing for the injection of arbitrary properties. This could be leveraged to execute arbitrary code or cause a denial-of-service condition.