npmPackage

@highcharts/grid-lite

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2026-118254High 8.6
Highcharts Grid: pagination language options are parsed as HTML
Affected: from 2.0.0, fixed in 3.2.0.
Fixed in 3.2.0 (released Sep 18, 2026, 40 days before disclosure).
The latest release, 3.2.0, is not affected.
32% of @highcharts/grid-lite downloads last week were affected versions (2K).
CVE-2026-118242High 8.5
Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`
Affected: from 2.3.0, fixed in 3.2.0.
Fixed in 3.2.0 (released Sep 18, 2026, 40 days before disclosure).
The latest release, 3.2.0, is not affected.
29% of @highcharts/grid-lite downloads last week were affected versions (1.9K).