VA
Product
@vaadin/charts
2
CVEs
0
On KEV
8.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add @vaadin/charts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107588 New | 8.4 | Oct 21 | Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts Affected: 22.0.0 before 23.6.7; 24.0.0 before 24.4.19; 24.5.0 before 24.7.13; 24.8.0 before 24.9.19; 24.10.0 before 24.10.7; 25.0.0 through 25.0.13; +3 more |
| CVE-2026-91860 | 6.3 | Sep 30 | Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge Affected: 23.0.0 before 23.6.5; 24.0.0 before 24.9.18; 24.10.0 before 24.10.5; 25.0.0 before 25.1.12; 25.2.0 before 25.2.9 |
Showing 2