All products

@highcharts/grid-pro

npm · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Highcharts Grid parses pagination language options as HTMLCVE-2026-118254 · GHSA-R5WG-Q8FC-P6W2 @highcharts/grid-lite@highcharts/grid-pro npm High Fix reported
Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`CVE-2026-118242 · GHSA-6G3C-P4FG-XV47 @highcharts/grid-lite@highcharts/grid-pro npmRed Hat High Fix reported
Highcharts Grid: `javascript:` URL in credits.href runs script on clickCVE-2026-118255 · GHSA-6HGP-FMHR-MRG4 @highcharts/dashboards@highcharts/grid-pro npm High Fix reported
Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`CVE-2026-116797 · GHSA-5GHW-9MGR-JVX2 @highcharts/dashboards@highcharts/grid-pro npmRed Hat High Fix reported
Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.CVE-2026-118247 · GHSA-C75X-9X9H-28RM @highcharts/dashboards@highcharts/grid-pro npm Medium Fix reported