CVE-2026-118250

A flaw was found in Highcharts. An attacker who controls chart series keys and data points can cause prototype pollution unauthorized modification of base JavaScript objects by providing dot-separated property paths. When the chart is rendered, the injected properties become accessible to all...