Cross-site Scripting (XSS)

Overview @highcharts/grid-lite is a Highcharts Grid Lite framework Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createSvgFromDefinition function in ts/Grid/Core/UI/SvgIcons.ts, where SVG path element attributes are set directly from user-supplied Grid icon...