@highcharts Grid-pro vulnerabilities

• highcharts, @highcharts dashboards, grid-pro +2 more Highcharts Grid: javascript: URL in credits.href runs script on click CVE-2026-118255 Fix available 8.4 HighOctober 28, 2026
• highcharts, @highcharts grid-lite, grid-pro +2 more Highcharts Grid: pagination language options are parsed as HTML CVE-2026-118254 Fix available 8.6 HighOctober 28, 2026
• @highcharts dashboards, highcharts, @highcharts grid-pro +2 more Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. CVE-2026-118247 Fix available 6.9 MediumOctober 28, 2026
• highcharts, @highcharts grid-lite, grid-pro +2 more Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>` CVE-2026-118242 Fix available 8.5 HighOctober 28, 2026
• highcharts, @highcharts dashboards, grid-pro +2 more Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` CVE-2026-116797 Fix available 8.5 HighOctober 28, 2026