The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.
{
"source": [
"CPE_RANGE",
"REFERENCES"
],
"cpe": "cpe:2.3:a:jointjs:jointjs:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "3.3.0"
}
]
}