Highcharts cross-site scripting vulnerability

Highcharts versions prior to 11.4.9, versions 12.0.0 through 12.6.1, and versions 13.0.0 through 13.1.0 contain a cross-site scripting vulnerability. This vulnerability arises because clicking the “Credits” tab fails to validate URLs against an allowed list of protocols; as a result, credits.href...