Vulnerabilidades em @highcharts
9 resultadosAnálise Vexday
A base do Vexday registra 9 CVEs associadas ao fornecedor @highcharts, nenhuma em KEV (sem exploração ativa conhecida) e nenhuma classificada como crítica pelo CVSS. A fraqueza dominante é a CWE-79 (cross-site scripting), e todas as 9 vulnerabilidades foram publicadas nos últimos 90 dias, o que indica risco recente e que merece acompanhamento de patches, embora sem sinal de ataque ativo no momento.
CVE-2026-118252HIGHHighcharts Dashboards: sidebar component labels are parsed as HTMLEPSS 0.4%CVE-2026-118254HIGHHighcharts Grid: pagination language options are parsed as HTMLEPSS 0.4%CVE-2026-118253HIGHHighcharts Dashboards: fullscreen labels are parsed as HTMLEPSS 0.4%CVE-2026-118247MEDIUMHighcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.EPSS 0.4%CVE-2026-118255HIGHHighcharts Grid: javascript: URL in credits.href runs script on clickEPSS 0.3%CVE-2026-118245HIGHHighcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespaceEPSS 0.3%CVE-2026-116797HIGHHighcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`EPSS 0.3%CVE-2026-118242HIGHHighcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`EPSS 0.3%CVE-2026-118248MEDIUMHighcharts Dashboards: editableOptions.propertyPath writes to Object.prototypeEPSS 0.3%