EUVD-2026-101558

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

PT-2026-113945

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.26 Description Authenticated users with permissions to edit dataset fields and chart configurations can inject HTML into a dimension value within a bar-horizontal chart. When the lengthLimit truncates the catego...