CVE-2026-118243 Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and state maps in plain objects keyed by DataTable ID. A proto table ID supplied through dataPool connector configuration resolves to Object.prototype, and sync...

CVE-2026-118243

Highcharts Dashboards versions 1.0.0 through 4.2.2 are vulnerable to a Prototype Pollution vulnerability (CWE-1321). The root cause is that the library stores DataCursor listener and state maps in plain objects keyed by DataTable ID . If a __proto__ table ID is provided via the dataPool connector...

PT-2026-129090

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and state maps in plain objects keyed by DataTable ID. A proto table ID supplied through dataPool connector configuration resolves to Object.prototype, and sync...