Threats affecting pkg:github/highcharts/dashboards

CVE-2026-118247 is a prototype pollution vulnerability in Highcharts JS affecting versions prior to 13.1.0, Dashboards prior to 4.2.3, and Grid Pro prior to 3.2.0. The issue arises because DataTable single-cell writers use untrusted column IDs without filtering out __proto__ or constructor keys, allowing writes to Object.prototype or the Object constructor. This can alter application control flow or disrupt rendering. Exploitation requires control over table or component column IDs and cell or API writes. The vulnerability is fixed in Highcharts 13.1.0, Dashboards 4.2.3, and Grid Pro 3.2.0.