Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Highcharts CVE-2026-118255
Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits link without validating
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118254
Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into the DOM as markup i
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118253
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode parses fullscreen language labels as HTML r
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118252
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses component language strings a
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118251
Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the window location when th
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118250
Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated series.keys paths with
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118249
Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118248
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode walks editableOptions propertyPath segments
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118247
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcharts DataTable single
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118246
Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.style as SVG attribute
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118245
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118244
Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML whe
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118243
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and state maps in plain ob
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-118242
Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object defin
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-116797
Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and
0 CVEs and 0 credit lines.
-
Highcharts CVE-2026-116796
Highcharts JS is a JavaScript charting library based on SVG. From 10.3.2 until 11.4.9, 12.6.2, and 13.1.1, Highcharts accepts an SVG anchor xlink:href attribute
0 CVEs and 0 credit lines.