آخرین آسیب‌پذیری‌ها

Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

Highcharts Grid: javascript: URL in credits.href runs script on click

Highcharts Grid: pagination language options are parsed as HTML

Highcharts Dashboards: fullscreen labels are parsed as HTML

Highcharts Dashboards: sidebar component labels are parsed as HTML

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)

Highcharts: javascript: URL in credits.href runs script on click

Highcharts: dotted series.keys paths write to Object.prototype

Highcharts: series column construction writes to Object.prototype

Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment

MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords

Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype`

MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename

MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message

MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous

MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations