CVE-2026-107588

The Vaadin Charts library (specifically the bundled Highcharts library) is vulnerable to multiple issues including Prototype Pollution and Cross-Site Scripting (XSS) . The root cause is that Vaadin pins specific Highcharts versions (9.2.2 for Vaadin 22-24; 12.2.0 for Vaadin 25), preventing indepe...

CLSA-2026-1782954029 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...

CLSA-2026-1782867618 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

CLSA-2026-1782867619 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.2.0-tuxcare.1...

CLSA-2026-1782867610 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.0-tuxcare.1...

CLSA-2026-1782867614 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.3-tuxcare.1...

CLSA-2026-1782867611 TuxCare security update for highcharts (3 CVEs)

TuxCare rebuilt highcharts to address 3 CVEs. Fixed in 6.0.7-tuxcare.1...

CLSA-2026-1782867617 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.2-tuxcare.1...

PT-2026-75225

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

PT-2026-75224

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.2-tuxcare.1...

PT-2026-75219

TuxCare rebuilt highcharts to address 3 CVEs. Fixed in 6.0.7-tuxcare.1...

PT-2026-75234

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...

PT-2026-75221

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.3-tuxcare.1...

PT-2026-75226

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.2.0-tuxcare.1...

PT-2026-75218

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.0-tuxcare.1...

WS-2021-0040

In highcharts-export-server before version 2.1.0 there is a vulnerability that allows exposure of internal HTTP resources. The vulnerability allows for reading and outputting files served by other services on the internal network in which the export server is hosted. If the export server is expos...

highcharts-thumbnail-generation (>=1.0.0, <=1.0.10) potentially affected by unknown CVE via highcharts-export-server (1.0.21)

highcharts-export-server NPM version 1.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on highcharts-export-server and may be impacted: - highcharts-thumbnail-generation =1.0.0, =1.0.10 Source cves: unknown CVE Source advisory: MEND:WS-2021-0040...

Nagios XI Highcharts XSS

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

Nagios XI Highcharts Library Data Access

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to deficiencies in access control when using a temporal catalog for export. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

CVE-2020-36862

Nagios XI versions prior to 5.6.11 contain unauthenticated vulnerabilities in the Highcharts local exporting tool. Crafted export requests could 1 inject script into exported/returned content due to insufficient output encoding XSS, and 2 cause the server to fetch attacker-specified URLs SSRF,...