Login Request a demo
GR
Product
grid-pro
by @highcharts · last CVE Oct 28, 2026
5
CVEs
0
On KEV
8.6
Max CVSS
5
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add grid-pro to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118254
New
8.6–Oct 28
Highcharts Grid: pagination language options are parsed as HTML
Affected: >= 2.0.0, < 3.2.0
CVE-2026-118242
New
8.5–Oct 28
Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
Affected: >= 2.3.0, < 3.2.0
CVE-2026-116797
New
8.5–Oct 28
Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`
Affected: >= 2.0.0, < 3.2.0
CVE-2026-118255
New
8.4–Oct 28
Highcharts Grid: javascript: URL in credits.href runs script on click
Affected: >= 2.0.0, < 3.2.0
CVE-2026-118247
New
6.9–Oct 28
Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.
Affected: >= 2.0.0, < 3.2.0
Showing 5