CVE-2026-118242 Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who controls Grid configuration can supply event-handler...