@highcharts/dashboards vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-118255High@highcharts/dashboards: Highcharts Grid: `javascript:` URL in credits.href runs script on clickCVE-2026-118253High@highcharts/dashboards: Highcharts Dashboards parses fullscreen labels as HTMLCVE-2026-118252High@highcharts/dashboards: Highcharts Dashboards parses sidebar component labels as HTMLCVE-2026-116797High@highcharts/grid-pro: Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`CVE-2026-118245High@highcharts/dashboards: Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespaceCVE-2026-118247Medium@highcharts/dashboards: Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.CVE-2026-118243Medium@highcharts/dashboards: Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo