CVE-2026-107588

Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these vulnerabilities by upgrading Highcharts on its own. Highsoft disclosed several vulnerabilities in that library that are...

CVE-2026-107588

The Vaadin Charts library (specifically the bundled Highcharts library) is vulnerable to multiple issues including Prototype Pollution and Cross-Site Scripting (XSS) . The root cause is that Vaadin pins specific Highcharts versions (9.2.2 for Vaadin 22-24; 12.2.0 for Vaadin 25), preventing indepe...

CVE-2026-107588 Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts

Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these vulnerabilities by upgrading Highcharts on its own. Highsoft disclosed several vulnerabilities in that library that are...

CLSA-2026-1782954029 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...

CLSA-2026-1782867619 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.2.0-tuxcare.1...

CLSA-2026-1782867617 TuxCare security update for highcharts (1 CVE)

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.2-tuxcare.1...

CLSA-2026-1782867611 TuxCare security update for highcharts (3 CVEs)

TuxCare rebuilt highcharts to address 3 CVEs. Fixed in 6.0.7-tuxcare.1...

CLSA-2026-1782867614 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.3-tuxcare.1...

CLSA-2026-1782867610 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.0-tuxcare.1...

CLSA-2026-1782867618 TuxCare security update for highcharts (2 CVEs)

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

PT-2026-75225

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

PT-2026-75226

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.2.0-tuxcare.1...

PT-2026-75219

TuxCare rebuilt highcharts to address 3 CVEs. Fixed in 6.0.7-tuxcare.1...

PT-2026-75221

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.3-tuxcare.1...

PT-2026-75224

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 7.2.2-tuxcare.1...

PT-2026-75218

TuxCare rebuilt highcharts to address 2 CVEs. Fixed in 6.1.0-tuxcare.1...

PT-2026-75234

TuxCare rebuilt highcharts to address 1 CVE. Fixed in 8.2.2-tuxcare.1...

WS-2021-0040

In highcharts-export-server before version 2.1.0 there is a vulnerability that allows exposure of internal HTTP resources. The vulnerability allows for reading and outputting files served by other services on the internal network in which the export server is hosted. If the export server is expos...

highcharts-thumbnail-generation (>=1.0.0, <=1.0.10) potentially affected by unknown CVE via highcharts-export-server (1.0.21)

highcharts-export-server NPM version 1.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on highcharts-export-server and may be impacted: - highcharts-thumbnail-generation =1.0.0, =1.0.10 Source cves: unknown CVE Source advisory: MEND:WS-2021-0040...

Nagios XI Highcharts XSS

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...