highcharts vulnerabilities and fixes
Exploited and high-severity highcharts vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.4CVE-2026-118255Highcharts Grid: javascript: URL in credits.href runs script on clickVerify fixhighcharts highcharts
1 min read - 7.2CVE-2026-118250Highcharts: dotted series.keys paths write to Object.prototypeVerify fixhighcharts highcharts
1 min read - 8.4CVE-2026-118246Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributesVerify fixhighcharts highcharts
1 min read - 8.5CVE-2026-118242Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`Verify fixhighcharts highcharts
1 min read - 8.6CVE-2026-118254Highcharts Grid: pagination language options are parsed as HTMLVerify fixhighcharts highcharts
1 min read - 8.4CVE-2026-118251Highcharts: javascript: URL in credits.href runs script on clickVerify fixhighcharts highcharts
1 min read