High severity7.5OSV Advisory· Published Mar 14, 2019· Updated Jun 17, 2026
CVE-2018-20801
CVE-2018-20801
Description
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
highchartsnpm | < 6.1.0 | 6.1.0 |
Affected products
3cpe:2.3:a:highcharts:highcharts:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:highcharts:highcharts:*:*:*:*:*:*:*:*range: <6.1.0
- (no CPE)range: highmaps-v1.0.2, highmaps-v1.1.0, highmaps-v2.1.3, …
Patches
Vulnerability mechanics
References
7- github.com/highcharts/highcharts/commit/7c547e1e0f5e4379f94396efd559a566668c0dfanvdPatchThird Party AdvisoryWEB
- snyk.io/vuln/npm:highcharts:20180225nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-xmc8-cjfr-phx3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-20801ghsaADVISORY
- security.netapp.com/advisory/ntap-20190715-0001ghsaWEB
- www.npmjs.com/advisories/793ghsaWEB
- security.netapp.com/advisory/ntap-20190715-0001/nvd
News mentions
0No linked articles in our index yet.