@progress/kendo-vue-charts vulnerabilities

CVEs whose affected-version data names the @progress/kendo-vue-charts package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106139Medium· 5.4

3w ago

In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared…

In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared…

▾ SunlitProgress Software · @progress/kendo-vue-chartsEPSS 0.13%via NVD