TI-2026-82142 CVE-2026-118255 · GHSA-6hgp-fmhr-mrg4
Highcharts Grid credits link runs script from javascript URL
Priority LOW 36
Highcharts JS is a JavaScript charting library based on SVG.
Vulnerabilities
18 records
TI-2026-82141 CVE-2026-118254 · GHSA-r5wg-q8fc-p6w2
Highcharts Grid parses pagination language options as HTML
Priority MEDIUM 40
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82140 CVE-2026-118253 · GHSA-58g7-7f52-h92c
Cross-site scripting in Highcharts Dashboards fullscreen labels
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82139 CVE-2026-118252 · GHSA-rcqf-f6h2-ccg9
Cross-site scripting in Highcharts Dashboards sidebar labels
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82138 CVE-2026-118251 · GHSA-5793-x2q3-c3q7
Highcharts credits link lets javascript URLs run script on click
Priority LOW 37
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82136 CVE-2026-118250 · GHSA-rmqc-xvr3-v46c
Prototype pollution in Highcharts via dotted series.keys paths
Priority LOW 34
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82135 CVE-2026-118249 · GHSA-gfvx-2c2g-38wq
Prototype pollution in Highcharts series column construction
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
Priority LOW 30
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82133 CVE-2026-118247 · GHSA-c75x-9x9h-28rm
Prototype pollution in Highcharts DataTable setCell
Priority LOW 36
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82132 CVE-2026-118246 · GHSA-35rr-xwfh-x789
Cross-site scripting in Highcharts breadcrumb style options
Priority LOW 38
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82131 CVE-2026-118245 · GHSA-grj7-r4jv-pw9j
Cross-site scripting in Highcharts Dashboards via chartConstructor
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82130 CVE-2026-118244 · GHSA-65hg-cf3f-5m39
Cross-site scripting in Highcharts Core during printing
Priority LOW 34
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82129 CVE-2026-118243 · GHSA-jqgh-w3cc-7jqw
Prototype pollution in Highcharts Dashboards data table IDs
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82128 CVE-2026-118242 · GHSA-6g3c-p4fg-xv47
Cross-site scripting in Highcharts Grid icon definitions
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82125 CVE-2026-116797 · GHSA-5ghw-9mgr-jvx2
Cross-site scripting in Highcharts Grid Pro cell renderer attributes
Priority LOW 39
Highcharts JS is a JavaScript charting library based on SVG.
TI-2026-82124 CVE-2026-116796 · GHSA-mw4f-gj5x-6xr4
Cross-site scripting in Highcharts Core through SVG xlink:href links
Priority LOW 32
Highcharts JS is a JavaScript charting library based on SVG.
TI-2021-10202 CVE-2021-29489 · GHSA-8j65-4pcq-xq95
Options structure open to XSS if passed unfiltered
Priority LOW 35
Highcharts JS is a JavaScript charting library based on SVG.
TI-2018-14772 CVE-2018-20801 · GHSA-xmc8-cjfr-phx3
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular…
Priority LOW 39
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.