6 matches found
GHSA-6G3C-P4FG-XV47 Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
Impact A custom icon supplied under rendering.icons as an icon definition object is built by creating an SVG path for each of its child entries and setting every key of that entry as an attribute of the path, without filtering the attribute names; only the string form of the option is passed...
Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
Impact A custom icon supplied under rendering.icons as an icon definition object is built by creating an SVG path for each of its child entries and setting every key of that entry as an attribute of the path, without filtering the attribute names; only the string form of the option is passed...
CVE-2026-118242
Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who controls Grid configuration can supply event-handler...
CVE-2026-118242 Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who controls Grid configuration can supply event-handler...
CVE-2026-118242
The Highcharts JS charting library (versions 2.3.0 through 3.2.0 ) is vulnerable to Cross-Site Scripting (XSS) via the Highcharts Grid component. The root cause is the use of the raw setAttribute method to copy child keys from rendering.icons object definitions into SVG path elements. An attacker...
PT-2026-129089
Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who controls Grid configuration can supply event-handler...