CVE-2026-118249
Highcharts: series column construction writes to Object.prototype
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point objects can therefore direct integer-indexed writes to Object.prototype or the Object constructor. The inherited values affect reads and for-in enumeration across the page and can disrupt rendering or alter consuming application behavior without user interaction beyond rendering the chart. This issue is fixed in 13.1.0.
| CWE | CWE-1321 |
| Vendor | highcharts |
| Product | highcharts |
| Published | Oct 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for highcharts highcharts
Be the first to know when new unknown vulnerabilities affecting highcharts highcharts are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
highcharts / highcharts
>= 13.0.0, < 13.1.0
References
github.com: https://github.com/highcharts/highcharts/security/advisories/GHSA-gfvx-2c2g-38wq github.com: https://github.com/highcharts/highcharts/pull/25321 github.com: https://github.com/highcharts/highcharts/commit/d3357705c8f348904441327e32f50ab528c3a205 github.com: https://github.com/highcharts/highcharts/releases/tag/v13.1.0