目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2026-107588— Vaadin Charts 高图表库多漏洞

一分钟漏洞结论

影响对象
vaadin vaadin
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Vaadin Charts 使用 Highcharts 库来渲染图表，并固定绑定特定版本：在 Vaadin 22 至 24 中为 9.2.2，在 Vaadin 25 中为 12.2.0。因此，应用程序无法通过自行升级 Highcharts 来消除这些漏洞。Highsoft 已披露该库中存在多个可通过图表配置触发的漏洞，包括：通过带点的系列键路径（dotted series.keys paths）向 写入数据；通过 、 、打印时的 HTML 文本解析以及导出图表中的 属性导致的跨站脚本攻击（XSS）。 如果攻击者可控

CVSS 8.4 · High

影响版本矩阵 36

厂商产品 版本范围状态
vaadin @vaadin/charts 22.0.0< 23.6.7 affected
24.0.0< 24.4.19 affected
24.5.0< 24.7.13 affected
24.8.0< 24.9.19 affected
24.10.0< 24.10.7 affected
25.0.0≤ 25.0.13 affected
25.1.0≤ 25.1.14 affected
25.2.0< 25.2.14 affected
… +1 条更多
vaadin vaadin 22.0.0< 23.6.16 affected
24.0.0< 24.4.24 affected
24.5.0< 24.7.16 affected
24.8.0< 24.9.23 affected
24.10.0< 24.10.11 affected
25.0.0≤ 25.0.13 affected
25.1.0≤ 25.1.13 affected
25.2.0< 25.2.10 affected
… +1 条更多
vaadin vaadin-charts-flow 22.0.0< 23.6.16 affected
24.0.0< 24.4.24 affected
24.5.0< 24.7.15 affected
24.8.0< 24.9.23 affected
24.10.0< 24.10.11 affected
25.0.0≤ 25.0.13 affected
25.1.0≤ 25.1.13 affected
25.2.0< 25.2.10 affected
… +1 条更多
vaadin vaadin-charts-flow-svg-generator 21.0.0< 23.6.16 affected
24.0.0< 24.4.24 affected
24.5.0< 24.7.15 affected
24.8.0< 24.9.23 affected
24.10.0< 24.10.11 affected
25.0.0≤ 25.0.13 affected
25.1.0≤ 25.1.13 affected
25.2.0< 25.2.10 affected
… +1 条更多
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-107588 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts
来源: CVE Program / CVE List V5
Vulnerability Description
Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these vulnerabilities by upgrading Highcharts on its own. Highsoft disclosed several vulnerabilities in that library that are reachable through the chart configuration: writes to Object.prototype through dotted series.keys paths, and cross-site scripting through credits.href, through breadcrumbs.style, through HTML text parsing while printing, and through xlink:href attributes in exported charts. An application is affected where data an attacker controls reaches the chart configuration, for example through additionalOptions, through updateConfiguration(), or through text options that accept markup. The fixed Vaadin versions apply Highsoft's recommended workarounds to the bundled Highcharts when it loads, and keep the same Highcharts version. Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include: Product version Vaadin 22.0.0 - 23.6.15 Vaadin 24.0.0 - 24.4.23 Vaadin 24.5.0 - 24.7.15 Vaadin 24.8.0 - 24.9.22 Vaadin 24.10.0 - 24.10.10 Vaadin 25.0.0 - 25.2.9 Vaadin 25.3.0 Mitigation Upgrade to 23.6.16 Upgrade to 24.4.24 Upgrade to 24.7.16 Upgrade to 24.9.23 Upgrade to 24.10.11 Upgrade to 25.2.10 Upgrade to 25.3.1 or newer Please note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 23, 24, 25 version. Artifacts Maven coordinates / Vulnerable versions / Fixed version com.vaadin:vaadin / 22.0.0 - 23.6.15 / >=23.6.16 com.vaadin:vaadin / 24.0.0 - 24.4.23 / >=24.4.24 com.vaadin:vaadin / 24.5.0 - 24.7.15 / >=24.7.16 com.vaadin:vaadin / 24.8.0 - 24.9.22 / >=24.9.23 com.vaadin:vaadin / 24.10.0 - 24.10.10 / >=24.10.11 com.vaadin:vaadin / 25.0.0 - 25.0.13 / >=25.2.10 com.vaadin:vaadin / 25.1.0 - 25.1.13 / >=25.2.10 com.vaadin:vaadin / 25.2.0 - 25.2.9 / >=25.2.10 com.vaadin:vaadin / 25.3.0 / >=25.3.1 com.vaadin:vaadin-charts-flow / 22.0.0 - 23.6.15 / >=23.6.16 com.vaadin:vaadin-charts-flow / 24.0.0 - 24.4.22 / >=24.4.24 com.vaadin:vaadin-charts-flow / 24.5.0 - 24.7.14 / >=24.7.15 com.vaadin:vaadin-charts-flow / 24.8.0 - 24.9.22 / >=24.9.23 com.vaadin:vaadin-charts-flow / 24.10.0 - 24.10.10 / >=24.10.11 com.vaadin:vaadin-charts-flow / 25.0.0 - 25.0.13 / >=25.2.10 com.vaadin:vaadin-charts-flow / 25.1.0 - 25.1.13 / >=25.2.10 com.vaadin:vaadin-charts-flow / 25.2.0 - 25.2.9 / >=25.2.10 com.vaadin:vaadin-charts-flow / 25.3.0 / >=25.3.1 com.vaadin:vaadin-charts-flow-svg-generator / 21.0.0 - 23.6.15 / >=23.6.16 com.vaadin:vaadin-charts-flow-svg-generator / 24.0.0 - 24.4.22 / >=24.4.24 com.vaadin:vaadin-charts-flow-svg-generator / 24.5.0 - 24.7.14 / >=24.7.15 com.vaadin:vaadin-charts-flow-svg-generator / 24.8.0 - 24.9.22 / >=24.9.23 com.vaadin:vaadin-charts-flow-svg-generator / 24.10.0 - 24.10.10 / >=24.10.11 com.vaadin:vaadin-charts-flow-svg-generator / 25.0.0 - 25.0.13 / >=25.2.10 com.vaadin:vaadin-charts-flow-svg-generator / 25.1.0 - 25.1.13 / >=25.2.10 com.vaadin:vaadin-charts-flow-svg-generator / 25.2.0 - 25.2.9 / >=25.2.10 com.vaadin:vaadin-charts-flow-svg-generator / 25.3.0 / >=25.3.1 npm packages npm package / Vulnerable versions / Fixed version @vaadin/charts / 22.0.0 - 23.6.6 / >=23.6.7 @vaadin/charts / 24.0.0 - 24.4.18 / >=24.4.19 @vaadin/charts / 24.5.0 - 24.7.12 / >=24.7.13 @vaadin/charts / 24.8.0 - 24.9.18 / >=24.9.19 @vaadin/charts / 24.10.0 - 24.10.6 / >=24.10.7 @vaadin/charts / 25.0.0 - 25.0.13 / >=25.2.14 @vaadin/charts / 25.1.0 - 25.1.14 / >=25.2.14 @vaadin/charts / 25.2.0 - 25.2.13 / >=25.2.14 @vaadin/charts / 25.3.0 / >=25.3.1
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
来源: CVE Program / CVE List V5

受影响产品

厂商 产品 影响版本 CPE 订阅
vaadin vaadin 22.0.0 ~ 23.6.16 -
vaadin vaadin-charts-flow 22.0.0 ~ 23.6.16 -
vaadin vaadin-charts-flow-svg-generator 21.0.0 ~ 23.6.16 -
vaadin @vaadin/charts 22.0.0 ~ 23.6.7 -

二、漏洞 CVE-2026-107588 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-107588 的情报信息

请登录查看更多情报信息。

CVE-2026-107588 其他参考 (25)

IV. Related Vulnerabilities

Same product: vaadin
Same vendor: vaadin
Same weakness: CWE-79

V. Comments for CVE-2026-107588

暂无评论

发表评论