CVE-2026-45249 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, kubeflow-katib, opensearch-dashboards...

CVE-2026-45249 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kubeflow-katib...

@aquacloud_ai/aqc-charts (>=0.1.1 <=0.1.3), @arkxos/arkos-system (>=0.1.1 <=0.1.10) +51 more potentially affected by CVE-2026-45249 via echarts (=6.0.0)

echarts NPM version =6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on echarts and may be impacted: - @aquacloudai/aqc-charts =0.1.1, =0.1.1, =5.1.121, =0.1.1, =1023.48.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =1023.0.0, =0.22.0,...

CVE-2026-45249

A cross-site scripting XSS vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0, if both Lines series and tooltip are used, and no user-specified tooltip.formatter is provided, and...

CVE-2026-45249 Apache ECharts: XSS in Lines series tooltip rendering

A cross-site scripting XSS vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic. This issue affects Apache ECharts: from before 6.1.0. In versions prior to 6.1.0, if both Lines series and tooltip are used, and no user-specified tooltip.formatter is provided, and...