@hilla/react-components (>=1.3.0-alpha3, <=1.6.4), @majinno/vaadin-components-import (>=1.0.1, <=1.0.16) +4 more potentially affected by CVE-2026-91860 via @vaadin/charts (>=23.0.0, <=23.6.4)

@vaadin/charts NPM version =23.0.0, =1.3.0-alpha3, =1.0.1, =23.0.0, =23.0.14, =1.0.2, =1.0.2, =1.0.3 Source cves: CVE-2026-91860 Source advisory: MEND:CVE-2026-91860...

@hilla/react-components (>=2.0.0, <=2.4.0-alpha2), @hilla/react-crud (>=2.3.0-beta1, <=2.5.8) +6 more potentially affected by CVE-2026-91860 via @vaadin/charts (>=24.0.0, <=24.9.17)

@vaadin/charts NPM version =24.0.0, =2.0.0, =2.3.0-beta1, =2.3.0-alpha1, =24.4.0-alpha10, =24.4.0-alpha12, =24.4.0-alpha10, =24.0.0-rc3, =24.10.0-alpha1 - hilla-admin-react 1.0.0 Source cves: CVE-2026-91860 Source advisory: MEND:CVE-2026-91860...