{"id":"EUVD-2026-112363","enisaUuid":"0c527c6a-522d-34aa-8365-72ae9bf7d83d","description":"Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point objects can therefore direct integer-indexed writes to Object.prototype or the Object constructor. The inherited values affect reads and for-in enumeration across the page and can disrupt rendering or alter consuming application behavior without user interaction beyond rendering the chart. This issue is fixed in 13.1.0.","datePublished":"Oct 28, 2026, 5:57:18 PM","dateUpdated":"Oct 29, 2026, 8:55:21 PM","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L","references":"https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq\nhttps://github.com/highcharts/highcharts/pull/25321\nhttps://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205\nhttps://github.com/highcharts/highcharts/releases/tag/v13.1.0\n","aliases":"CVE-2026-118249\nGHSA-gfvx-2c2g-38wq\n","assigner":"GitHub_M","epss":0.36,"enisaIdProduct":[{"id":"273601ef-9df9-3786-baeb-f90497591dae","product":{"name":"highcharts","vendor":{"name":"highcharts"}},"product_version":"13.0.0, \u003c 13.1.0"}],"enisaIdVendor":[{"id":"e907edb3-63b6-3e8d-959f-372ed667b428","vendor":{"name":"highcharts"}}],"enisaIdVulnerability":[{"id":"1acb8036-f005-38c5-94d4-d59325517ed5","vulnerability":{"id":"CVE-2026-118249","description":"Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point objects can therefore direct integer-indexed writes to Object.prototype or the Object constructor. The inherited values affect reads and for-in enumeration across the page and can disrupt rendering or alter consuming application behavior without user interaction beyond rendering the chart. This issue is fixed in 13.1.0.","datePublished":"Oct 28, 2026, 5:57:18 PM","dateUpdated":"Oct 29, 2026, 8:55:21 PM","status":"PUBLISHED","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L","references":"https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq\nhttps://github.com/highcharts/highcharts/pull/25321\nhttps://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205\nhttps://github.com/highcharts/highcharts/releases/tag/v13.1.0\n","enisa_id":"EUVD-2026-112363\n","assigner":"GitHub_M","epss":0.36,"dataProcessed":"Nov 3, 2026, 7:15:55 AM","vulnerabilityProduct":[{"id":"c1ced651-c50a-3ca1-bab0-9e81df1632a0","product":{"name":"highcharts","vendor":{"name":"highcharts"}},"product_version":"13.0.0, \u003c 13.1.0"}],"vulnerabilityVendor":[{"id":"0302b956-7e1e-3614-b381-f753ef1f275d","vendor":{"name":"highcharts"}}]}},{"id":"46f8d230-a88d-3154-953c-3b3100148003","vulnerability":{"id":"GHSA-gfvx-2c2g-38wq","description":"Highcharts: series column construction writes to Object.prototype","datePublished":"Oct 28, 2026, 7:56:13 PM","dateUpdated":"Oct 28, 2026, 7:56:13 PM","baseScore":0.0,"references":"https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-118249\nhttps://github.com/highcharts/highcharts/pull/25321\nhttps://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205\nhttps://github.com/highcharts/highcharts\nhttps://github.com/highcharts/highcharts/releases/tag/v13.1.0\n","enisa_id":"EUVD-2026-112363\n","aliases":"CVE-2026-118249\nGHSA-gfvx-2c2g-38wq\n","epss":0.0,"dataProcessed":"Nov 3, 2026, 7:03:11 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}