@highcharts grid-pro

• CVE-2026-118255 High 8.4 Highcharts Grid: javascript: URL in credits.href runs script on click 0.3%
• CVE-2026-118254 High 8.6 Highcharts Grid: pagination language options are parsed as HTML 0.4%
• CVE-2026-118247 Medium 6.9 Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. 0.4%
• CVE-2026-118242 High 8.5 Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>` 0.3%
• CVE-2026-116797 High 8.5 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` 0.3%