CA
Product
@carbon/charts
by IBM · last CVE Oct 20, 2026
2
CVEs
0
On KEV
6.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add @carbon/charts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-94402
6.1
0%
Oct 20
IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
Affected: 0.4.0 through 1.27.19
CVE-2024-47117
5.4
0%
Dec 10
IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting
Affected: 0.4.0 before 1.13.17
Showing 2