EUVD-2019-0398

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Highcharts JS before 6.1.0 vulnerable to denial of service via backtracking regular expressions.

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm
Circl	CVE-2018-20801	14 Mar 201919:19	–	circl
CVE	CVE-2018-20801	14 Mar 201916:00	–	cve
Cvelist	CVE-2018-20801	14 Mar 201916:00	–	cvelist
Github Security Blog	Regular Expression Denial of Service in highcharts	18 Mar 201915:59	–	github
NVD	CVE-2018-20801	14 Mar 201916:29	–	nvd
OSV	GHSA-XMC8-CJFR-PHX3 Regular Expression Denial of Service in highcharts	18 Mar 201915:59	–	osv
Prion	Code injection	14 Mar 201916:29	–	prion
Veracode	Denial Of Service (DoS)	15 Mar 201905:27	–	veracode

[
  {
    "enisaIdVendor": [
      {
        "id": "2d9b95f6-e87f-3cfc-a687-dda4b4be9b93",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6395807b-8ce1-3359-90ff-81cd5ba08214",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-20801
github	www.github.com/highcharts/highcharts/commit/7c547e1e0f5e4379f94396efd559a566668c0dfa
github	www.github.com/advisories/GHSA-xmc8-cjfr-phx3
github	www.github.com/highcharts/highcharts
security	www.security.netapp.com/advisory/ntap-20190715-0001
snyk	www.snyk.io/vuln/npm:highcharts:20180225
npmjs	www.npmjs.com/advisories/793
security	www.security.netapp.com/advisory/ntap-20190715-0001/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 37.5

CVSS 25

EPSS0.00473

highcharts vulnerability denial of service backtracking regular expressions