Skip to content

@highcharts/dashboards

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Behind the package

Explore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.

Highcharts Dashboards framework

Latest release4.2.3

Declared licensehttps://www.highcharts.com/license

Listed maintainerstorsteinhonsi, jtistel, jszuminski, bre1470, cvasseng, oysteinmoseng, khlieng, askelj, goransle, skrulling

Runtime dependencies0

Install-time scriptsNone declared

Integrity metadataRecorded by registry

Attestation metadataNot recorded

Registry deprecationNot marked deprecated

Fetched 31/10/2026, 04:30:39 UTC · Original registry metadata

Release history

Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

high8.4

CVE-2026-118255Fix available

Highcharts Grid: javascript: URL in credits.href runs script on click

npm / @highcharts/dashboards npm / @highcharts/grid-pro

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 3.2.0 before 4.0.0Semantic versions	4.0.0

Version evidence: OSV · GHSA-6hgp-fmhr-mrg4

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "3.2.0"
        },
        {
          "fixed": "4.0.0"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

high8.4

CVE-2026-118253Fix available

Highcharts Dashboards parses fullscreen labels as HTML

npm / @highcharts/dashboards

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 1.0.0 before 4.2.3Semantic versions	4.2.3

Version evidence: OSV · GHSA-58g7-7f52-h92c

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.0"
        },
        {
          "fixed": "4.2.3"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

high8.4

CVE-2026-118252Fix available

Highcharts Dashboards parses sidebar component labels as HTML

npm / @highcharts/dashboards

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 1.0.0 before 4.2.3Semantic versions	4.2.3

Version evidence: OSV · GHSA-rcqf-f6h2-ccg9

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.0"
        },
        {
          "fixed": "4.2.3"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

medium6.9

CVE-2026-118247Fix available

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `proto` as an existing column.

npm / @highcharts/dashboards npm / @highcharts/grid-pro

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 1.0.0 before 4.2.2Semantic versions	4.2.2

Version evidence: OSV · GHSA-c75x-9x9h-28rm

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.0"
        },
        {
          "fixed": "4.2.2"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

high8.6

CVE-2026-118245Fix available

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

npm / @highcharts/dashboards

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 1.0.0 before 4.2.2Semantic versions	4.2.2

Version evidence: OSV · GHSA-grj7-r4jv-pw9j

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.0"
        },
        {
          "fixed": "4.2.2"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

medium5.3

CVE-2026-118243Fix available

Highcharts Dashboards: `proto` data table id writes sync listeners to `Object.prototype`

npm / @highcharts/dashboards

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 1.0.0 before 4.2.2Semantic versions	4.2.2

Version evidence: OSV · GHSA-jqgh-w3cc-7jqw

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "1.0.0"
        },
        {
          "fixed": "4.2.2"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}

high8.5

CVE-2026-116797Fix available

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

npm / @highcharts/grid-pro npm / @highcharts/dashboards

2 days ago

@highcharts/dashboards npm

Affected range	Recorded fix
From 3.6.0 before 4.0.0Semantic versions	4.0.0

Version evidence: OSV · GHSA-5ghw-9mgr-jvx2

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "3.6.0"
        },
        {
          "fixed": "4.0.0"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": [
    "3.6.0"
  ]
}