highcharts vulnerabilities (TuxCare)
7 vulnerabilities.
-
highchartsTuxCare Highcharts: javascript: URL in credits.href runs script on click 8.4 High -
highchartsTuxCare Highcharts: dotted series.keys paths write to Object.prototype 7.2 High -
highchartsTuxCare Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes 8.4 High -
highchartsTuxCare Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print 7.2 High -
highchartsTuxCare Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts 7.2 High -
highchartsTuxCare Options structure open to XSS if passed unfiltered 7.6 High -
highchartsTuxCare Regular Expression Denial of Service in Acorn 7.5 High