Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

影響: npm:highcharts >= 12.0.0, < 12.6.1 → 12.6.1, npm:highcharts >= 13.0.0, <= 13.0.2 → 13.1.0

When the HTML text parser cannot obtain a document from DOMParser because the call throws, it falls back to assigning the raw markup to the innerHTML of an element created in the hosting document, and the allow-list is applied only to the resulting DOM afterwards. In Chromium the Trusted Types policy callback that the parser uses throws while a beforeprint handler is running, so if the hosting page re-renders the chart from a beforeprint handler, every HTML-rendered text option parsed at that m…

在 GitHub Advisory Database 阅读

2026/10/29 04:55，GitHub Advisory Database 发布了“Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：JavaScript / Node.js。CVE：CVE-2026-118244。