@highcharts/dashboards vulnerabilities (npm)
7 vulnerabilities.
-
@highcharts/dashboardsnpm Highcharts Grid: javascript: URL in credits.href runs script on click 8.4 High -
@highcharts/dashboardsnpm Highcharts Dashboards: fullscreen labels are parsed as HTML 8.4 High -
@highcharts/dashboardsnpm Highcharts Dashboards: sidebar component labels are parsed as HTML 8.4 High -
@highcharts/dashboardsnpm Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. 6.9 Medium -
@highcharts/dashboardsnpm Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace 8.6 High -
@highcharts/dashboardsnpm Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype` 5.3 Medium -
@highcharts/dashboardsnpm Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` 8.5 High