CVE-2026-107588 | Vaadin vaadin-charts-flow-svg-generator Chart Configuration updateConfiguration additionalOptions cross site scripting

October 21, 2026 Yanac

A vulnerability was found in Vaadin vaadin-charts-flow-svg-generator, vaadin-charts-flow and vaadin-charts. It has been rated as problematic. Affected by this vulnerability is the function updateConfiguration of the component Chart Configuration. This manipulation of the argument additionalOptions causes cross site scripting.

This vulnerability appears as CVE-2026-107588. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More