grid-lite vulnerabilities

2 known vulnerabilities in grid-lite from Highcharts. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  highcharts: Improper Neutralization of Input During Web Page Generation

  CVE-2026-118254Oct 28, 2026Highcharts

  Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into the DOM as markup instead of text. An attacker who controls the Grid language configuration can provide elements with e

• 8.5 High severity

  highcharts: Improper Neutralization of Input During Web Page Generation

  CVE-2026-118242Oct 28, 2026Highcharts

  Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who controls Grid config