CVE-2026-116796

A flaw was found in Highcharts. An attacker who can supply chart text configurations can execute arbitrary script in a victim's browser session. The library fails to validate URL schemes on certain Scalable Vector Graphics SVG anchor link attributes, allowing malicious JavaScript links to persist...