CVE-2026-118244

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-118244
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-118244.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-118244
Aliases
Published
2026-10-28T17:36:43Z
Modified
2026-10-29T02:48:31Z
Severity
  • 7.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print
Details

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chromium, the Trusted Types callback can throw while a beforeprint handler runs, so a page that redraws a chart during beforeprint can insert untrusted HTML text options into the hosting document. Event handlers in that markup then run in the page origin when printing begins. The issue affects HTML-rendered titles, labels, data labels, responsive text, and the Stock, Maps, and Gantt products shipped in the same package. This issue is fixed in 12.6.1 and 13.1.0.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-79"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/118xxx/CVE-2026-118244.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "12.0.0"
                        },
                        {
                            "fixed":  "12.6.1"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StringRangeExpression"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/highcharts/highcharts

Affected ranges

Type
GIT
Repo
https://github.com/highcharts/highcharts
Events
Introduced
e44b0e19db9affdb85b667524365d268c314b957
Fixed
5d3e905ce2e2c75c174c06cf8dee0f00a5e02841
Fixed
abde7c576793bf50b0e0636e59b49630de6dd0d5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "13.0.0"
                },
                {
                    "fixed":  "13.1.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "fixed":  "abde7c576793bf50b0e0636e59b49630de6dd0d5"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v13.1.0",
            "range":  [
                {
                    "fixed":  "5d3e905ce2e2c75c174c06cf8dee0f00a5e02841"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

dashboards-v4.*
dashboards-v4.2.1
grid-v3.*
grid-v3.1.0
v13.*
v13.0.0
v13.0.1
v13.0.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-118244.json"