Highcharts: series column construction writes to Object.prototype

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-118249 · Microsoft / collected KEV context

EUVD-2026-112363

GHSA-gfvx-2c2g-38wq

cve-program · CVE-2026-118249

• https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq
• https://github.com/highcharts/highcharts/pull/25321
• https://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205
• https://github.com/highcharts/highcharts/releases/tag/v13.1.0

euvd · EUVD-2026-112363

• https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq
• https://github.com/highcharts/highcharts/pull/25321
• https://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205
• https://github.com/highcharts/highcharts/releases/tag/v13.1.0

nvd · CVE-2026-118249

• https://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205
• https://github.com/highcharts/highcharts/pull/25321
• https://github.com/highcharts/highcharts/releases/tag/v13.1.0
• https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq

osv · GHSA-gfvx-2c2g-38wq

• https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq
• https://nvd.nist.gov/vuln/detail/CVE-2026-118249
• https://github.com/highcharts/highcharts/pull/25321
• https://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205
• https://github.com/highcharts/highcharts
• https://github.com/highcharts/highcharts/releases/tag/v13.1.0

• Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point … · Advisory content revised · 5 Nov 2026
• Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point … · Advisory content revised · 3 Nov 2026
• Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point … · Advisory content revised · 30 Oct 2026
• Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point … · Advisory content revised · 30 Oct 2026
• Highcharts: series column construction writes to Object.prototype · Newly collected advisory · 28 Oct 2026
• Highcharts: series column construction writes to Object.prototype · Newly collected advisory · 28 Oct 2026