ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>` Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previously copied every child key with setAttribute. An attacker who …6 linked entries across history · in Security Follow evidence and connection reasons
  2. Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype` Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and state maps in plain objects keyed by DataTable ID. A __proto__ table ID supplied through dataPool conn…6 linked entries across history · in Security Follow evidence and connection reasons
  3. Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chrom…6 linked entries across history · in Security Follow evidence and connection reasons
  4. Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component …6 linked entries across history · in Security Follow evidence and connection reasons
  5. Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.style as SVG attributes rather than CSS and does not filter the attribute names. An attacker who contr…6 linked entries across history · in Security Follow evidence and connection reasons
  6. Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcharts DataTable single-cell writers use an untrusted column ID as a key without rejecting __proto__ or…6 linked entries across history · in Security Follow evidence and connection reasons
  7. Highcharts: series column construction writes to Object.prototype Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point …6 linked entries across history · in Security Follow evidence and connection reasons
  8. Highcharts: dotted series.keys paths write to Object.prototype Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated series.keys paths without filtering each segment. An attacker who controls series.keys and matching po…6 linked entries across history · in Security Follow evidence and connection reasons
  9. Highcharts: javascript: URL in credits.href runs script on click Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the window location when the credits label is clicked without checking the URL against the allowed-scheme l…6 linked entries across history · in Security Follow evidence and connection reasons
  10. Highcharts Dashboards: sidebar component labels are parsed as HTML Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses component language strings as HTML rather than inserting them as text. An attacker who controls the Dashboar…6 linked entries across history · in Security Follow evidence and connection reasons
  11. Highcharts Dashboards: fullscreen labels are parsed as HTML Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode parses fullscreen language labels as HTML rather than inserting them as text. An attacker who controls Dashboards language …6 linked entries across history · in Security Follow evidence and connection reasons
  12. Highcharts Grid: pagination language options are parsed as HTML Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into the DOM as markup instead of text. An attacker who controls the Grid language configuration can pro…6 linked entries across history · in Security Follow evidence and connection reasons
  13. Highcharts Grid: javascript: URL in credits.href runs script on click Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits link without validating the URL scheme. An attacker who controls Grid configuration can provide a javas…6 linked entries across history · in Security Follow evidence and connection reasons
  14. Echo: BodyDump captures request and response bodies without size limits in v4 Newly collected advisory: Echo: BodyDump captures request and response bodies without size limits in v4 in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  15. Echo: Decompress permits unbounded gzip expansion in v4 Newly collected advisory: Echo: Decompress permits unbounded gzip expansion in v4 in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  16. Echo: WebSocket proxy can retain connections and handlers after client disconnect Newly collected advisory: Echo: WebSocket proxy can retain connections and handlers after client disconnect in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  17. Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests Newly collected advisory: Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  18. Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls Newly collected advisory: Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  19. Echo: X-Real-IP extractor trusts the header value instead of the sending peer Newly collected advisory: Echo: X-Real-IP extractor trusts the header value instead of the sending peer in github.com/labstack/echo5 linked entries across history · in Security Follow evidence and connection reasons
  20. Jira Software Data Center and Server: DoS (Denial of Service) nanoid Dependency (CVE-2026-67214) Advisory content revised: nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative size, the loop counter is decremented fro…5 linked entries across history · in Security Follow evidence and connection reasons
  21. protobufjs has an arbitrary code execution issue Advisory content revised: protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1, 7.5.5, and 6.11.6, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will then execute during object …4 linked entries across history · in Security Follow evidence and connection reasons
  22. CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals Advisory content revised: js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.1 parse hexadecimal / octal / binary integer literals via a hand-written `parseBigInt` loop that multiplies a `BigInt` accum…4 linked entries across history · in Security Follow evidence and connection reasons
  23. SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files Newly collected advisory: SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files in github.com/siyuan-note/siyuan/kernel4 linked entries across history · in Security Follow evidence and connection reasons
  24. cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials Newly collected advisory: cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials in github.com/cert-manager/cert-manager4 linked entries across history · in Security Follow evidence and connection reasons
  25. Microsoft 365 admin center: Usage reports – Microsoft 365 Copilot Connectors Now rolling out4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Microsoft Teams: Personal message reminders for chat and channels Now rolling out4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  27. Planner: Capabilities in Microsoft Cowork Message Center · Stay informed: MC1540339: Microsoft Planner: Planner capabilities in Copilot Cowork through the Planner Plugin4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  28. KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite Newly collected advisory: KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt3 linked entries across history · in Security Follow evidence and connection reasons
  29. KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption Newly collected advisory: KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt3 linked entries across history · in Security Follow evidence and connection reasons
  30. Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution Advisory content revised: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting w…3 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 07:12 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.