GHSA-grj7-r4jv-pw9jPublished
Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-118245 · Microsoft / collected KEV context
cve-program · CVE-2026-118245
- https://github.com/highcharts/highcharts/security/advisories/GHSA-grj7-r4jv-pw9j
- https://github.com/highcharts/highcharts/commit/98d3652cdc4f66fbccbbb8b4184ecd8f647f74de
- https://github.com/highcharts/highcharts/releases/tag/dashboards-v4.2.2
euvd · EUVD-2026-112308
- https://github.com/highcharts/highcharts/security/advisories/GHSA-grj7-r4jv-pw9j
- https://github.com/highcharts/highcharts/commit/98d3652cdc4f66fbccbbb8b4184ecd8f647f74de
- https://github.com/highcharts/highcharts/releases/tag/dashboards-v4.2.2
nvd · CVE-2026-118245
- https://github.com/highcharts/highcharts/commit/98d3652cdc4f66fbccbbb8b4184ecd8f647f74de
- https://github.com/highcharts/highcharts/releases/tag/dashboards-v4.2.2
- https://github.com/highcharts/highcharts/security/advisories/GHSA-grj7-r4jv-pw9j
osv · GHSA-grj7-r4jv-pw9j
- https://github.com/highcharts/highcharts/security/advisories/GHSA-grj7-r4jv-pw9j
- https://nvd.nist.gov/vuln/detail/CVE-2026-118245
- https://github.com/highcharts/highcharts/commit/98d3652cdc4f66fbccbbb8b4184ecd8f647f74de
- https://github.com/highcharts/highcharts
- https://github.com/highcharts/highcharts/releases/tag/dashboards-v4.2.2
Related operational evidence
Explicit CVE identifiers- Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component … · Advisory content revised · 5 Nov 2026
- Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component … · Advisory content revised · 3 Nov 2026
- Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component … · Advisory content revised · 30 Oct 2026
- Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component … · Advisory content revised · 30 Oct 2026
- Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace · Newly collected advisory · 28 Oct 2026
- Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace · Newly collected advisory · 28 Oct 2026