PatchTheCVEecharts vulnerabilities and fixes
Recent CVEs affecting echarts, with upgrade or downgrade steps. 1 tracked.
echarts has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-05-25. Highest priority: CVE-2026-45249 (score 40/100).
- CVE-2026-45249 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logi
FAQ
How do I fix echarts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is echarts being exploited right now?
None of the tracked echarts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which echarts CVE should I patch first?
CVE-2026-45249 currently ranks highest (40/100): A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logi.