TI-2026-82141 CVE-2026-118254 · GHSA-r5wg-q8fc-p6w2
Highcharts Grid parses pagination language options as HTML
Priority MEDIUM 40
Highcharts JS is a JavaScript charting library based on SVG.
highcharts
Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
highcharts records in CISA KEVNo highcharts vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records
TI-2026-82140 CVE-2026-118253 · GHSA-58g7-7f52-h92c
Cross-site scripting in Highcharts Dashboards fullscreen labels
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82139 CVE-2026-118252 · GHSA-rcqf-f6h2-ccg9
Cross-site scripting in Highcharts Dashboards sidebar labels
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82131 CVE-2026-118245 · GHSA-grj7-r4jv-pw9j
Cross-site scripting in Highcharts Dashboards via chartConstructor
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82128 CVE-2026-118242 · GHSA-6g3c-p4fg-xv47
Cross-site scripting in Highcharts Grid icon definitions
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82125 CVE-2026-116797 · GHSA-5ghw-9mgr-jvx2
Cross-site scripting in Highcharts Grid Pro cell renderer attributes
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2018-14772 CVE-2018-20801 · GHSA-xmc8-cjfr-phx3
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular…
Priority LOW 39
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.
TI-2026-82132 CVE-2026-118246 · GHSA-35rr-xwfh-x789
Cross-site scripting in Highcharts breadcrumb style options
Priority LOW 38
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82138 CVE-2026-118251 · GHSA-5793-x2q3-c3q7
Highcharts credits link lets javascript URLs run script on click
Priority LOW 37
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82142 CVE-2026-118255 · GHSA-6hgp-fmhr-mrg4
Highcharts Grid credits link runs script from javascript URL
Priority LOW 36
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82133 CVE-2026-118247 · GHSA-c75x-9x9h-28rm
Prototype pollution in Highcharts DataTable setCell
Priority LOW 36
Highcharts JS is a JavaScript charting library based on SVG.
TI-2021-10202 CVE-2021-29489 · GHSA-8j65-4pcq-xq95
Options structure open to XSS if passed unfiltered
Priority LOW 35
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82136 CVE-2026-118250 · GHSA-rmqc-xvr3-v46c
Prototype pollution in Highcharts via dotted series.keys paths
Priority LOW 34
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82130 CVE-2026-118244 · GHSA-65hg-cf3f-5m39
Cross-site scripting in Highcharts Core during printing
Priority LOW 34
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82135 CVE-2026-118249 · GHSA-gfvx-2c2g-38wq
Prototype pollution in Highcharts series column construction
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82129 CVE-2026-118243 · GHSA-jqgh-w3cc-7jqw
Prototype pollution in Highcharts Dashboards data table IDs
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82124 CVE-2026-116796 · GHSA-mw4f-gj5x-6xr4
Cross-site scripting in Highcharts Core through SVG xlink:href links
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
Priority LOW 30
Highcharts JS is a JavaScript charting library based on SVG.