Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/28 5:50 p.m.•15 views

CVE-2026-118247 Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcharts DataTable single-cell writers use an untrusted column ID as a key without rejecting proto or constructor. DataTable.setCell, including Dashboards connect...

6.9CVSS
SaveExploits0References4
Rows per page
Query Builder