CVE-2026-45249
1 advisory.
npm/echarts CVE-2026-45249: medium 6.1
Apache ECharts has a cross-site scripting (XSS) vulnerability
Action: Upgrade echarts to 6.1.0 or later.
npm i echarts@6.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.0 | - |
Fixed versions
| 6.1.0 |
Sources
- osv: GHSA-fgmj-fm8m-jvvx
- https://nvd.nist.gov/vuln/detail/CVE-2026-45249
- https://github.com/apache/echarts/pull/21608
- https://github.com/apache/echarts/commit/1e39b00eedda0e4a0b048e099c0e13ce7149d90f
- https://echarts.apache.org/en/option.html#series-lines
- https://echarts.apache.org/handbook/en/best-practices/security/#passing_raw_html_safely
- https://github.com/apache/echarts
- https://lists.apache.org/thread/1g6xk7gd9vg1c6zyqqt2lnko10zomc3o
- http://www.openwall.com/lists/oss-security/2026/05/23/4
CVE-2026-45249 · published · modified · JSON