@progress/kendo-react-charts vulnerabilities

CVEs whose affected-version data names the @progress/kendo-react-charts package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106138Medium· 5.4

2w ago

In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared too…

In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared too…

▾ SunlitProgress Software · @progress/kendo-react-chartsEPSS 0.13%via NVD