CVE-2023-46308: plotly.js prototype pollution vulnerability

Severity: Critical

CVSS Score: 9.8

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.