highcharts vulnerabilities (npm)
8 vulnerabilities.
-
highchartsnpm Highcharts: javascript: URL in credits.href runs script on click 8.4 High -
highchartsnpm Highcharts: dotted series.keys paths write to Object.prototype 7.2 High -
highchartsnpm Highcharts: series column construction writes to Object.prototype 7.2 High -
highchartsnpm Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes 8.4 High -
highchartsnpm Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print 7.2 High -
highchartsnpm Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts 7.2 High -
highchartsnpm Options structure open to XSS if passed unfiltered 7.6 High -
highchartsnpm Regular Expression Denial of Service in Acorn 7.5 High