A vulnerability was found in Chartist up to 1.3.0. It has been declared as problematic. Affected by this vulnerability is the function extend. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability is known as CVE-2024-45435. The attack needs to be done within the local network. There is no exploit available.