Vulnerabilities in @highcharts
9 resultsCVE-2026-118252HIGHHighcharts Dashboards: sidebar component labels are parsed as HTMLEPSS 0.4%CVE-2026-118254HIGHHighcharts Grid: pagination language options are parsed as HTMLEPSS 0.4%CVE-2026-118253HIGHHighcharts Dashboards: fullscreen labels are parsed as HTMLEPSS 0.4%CVE-2026-118247MEDIUMHighcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.EPSS 0.4%CVE-2026-118255HIGHHighcharts Grid: javascript: URL in credits.href runs script on clickEPSS 0.3%CVE-2026-118245HIGHHighcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespaceEPSS 0.3%CVE-2026-116797HIGHHighcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`EPSS 0.3%CVE-2026-118242HIGHHighcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`EPSS 0.3%CVE-2026-118248MEDIUMHighcharts Dashboards: editableOptions.propertyPath writes to Object.prototypeEPSS 0.3%