highcharts

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

highcharts records in CISA KEV

No highcharts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Highcharts 2 records LOW

Records

2 records in Highcharts · all components

TI-2018-14772 CVE-2018-20801 · GHSA-xmc8-cjfr-phx3

In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular…

LOW 39

In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03169 Published 2019-03-14 Fixed in 6.1.0 CWE-185

TI-2021-10202 CVE-2021-29489 · GHSA-8j65-4pcq-xq95

Options structure open to XSS if passed unfiltered

LOW 35

Highcharts JS is a JavaScript charting library based on SVG.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00867 Published 2021-05-05 Fixed in 9.0.0 CWE-79

Open these records in search →