CVE-2026-118242

A flaw was found in Highcharts. When rendering grid icons using Scalable Vector Graphics SVG, the library copies configuration properties directly into element attributes without proper sanitization. An attacker who controls the grid configuration can supply malicious event handlers within custom...