npm/highcharts CVE-2021-29489: high 7.6, EPSS 0.87%
Options structure open to Cross-site Scripting if passed unfiltered
Action: Upgrade highcharts to 9.0.0 or later.
npm i highcharts@9.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.0 | - |
Fixed versions
| 9.0.0 |
Sources
- osv: GHSA-8j65-4pcq-xq95
- https://github.com/highcharts/highcharts/security/advisories/GHSA-8j65-4pcq-xq95
- https://nvd.nist.gov/vuln/detail/CVE-2021-29489
- https://github.com/highcharts/highcharts
- https://security.netapp.com/advisory/ntap-20210622-0005
- https://www.npmjs.com/package/highcharts
CVE-2021-29489 · published · modified · JSON