IBM Carbon Charts
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Carbon Charts.
By the Year
In 2026 there have been 1 vulnerability in IBM Carbon Charts with an average score of 6.1 out of ten. Carbon Charts did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.10 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 5.40 |
It may take a day or so for new Carbon Charts vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Carbon Charts Security Vulnerabilities
IBM Carbon Charts 0.4.01.27.19 MeterChart XSS via Title.truncateTitle
CVE-2026-94402
6.1 - Medium
- October 20, 2026
IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.
XSS
IBM Carbon Design System Cross-Site Scripting Vulnerability in Carbon Charts
CVE-2024-47117
5.4 - Medium
- December 10, 2024
IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Carbon Charts or by IBM? Click the Watch button to subscribe.
