highcharts güvenlik açıkları
highcharts
- Toplam açık
- 11
- Kritik
- 0
- Aktif istismar
- 0
- Yaması çıkan
- 4
- Son açık
- 17 dk önce
Önem dağılımı
- Kritik 0
- Yüksek 8
- Orta 3
- Düşük 0
Son açıklar
11 açık
- 7,2Yüksek CVE-2026-118250 Highcharts: dotted series.keys paths write to Object.prototype
- 7,2Yüksek CVE-2026-118249 Highcharts: series column construction writes to Object.prototype
- 6,9Orta CVE-2026-118248Yama var Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype
- 6,9Orta CVE-2026-118247Yama var Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
- 8,4Yüksek CVE-2026-118246 Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes
- 8,6Yüksek CVE-2026-118245Yama var Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace
- 7,2Yüksek CVE-2026-118244 Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print
- 5,3Orta CVE-2026-118243 Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`
- 8,5Yüksek CVE-2026-118242Yama var Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
- 8,5Yüksek CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`
- 7,2Yüksek CVE-2026-116796 Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts