Skip to content
OpenAdvisories

Product · Progress Software

Kendo UI for Vue

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.1
    CVE-2026-106128

    Prototype Pollution in Progress Software Kendo UI for Vue

    Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0 allows a high-privileged attacker who can control a field path processed by components such as the Scheduler to modify the prototype of built-…

    Progress Software Kendo UI for Vue
  • Medium 5.4
    CVE-2026-106143

    Cross-Site Scripting in Progress Software Kendo UI for Vue

    Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-vue-editor) in Progress Software Kendo UI for Vue versions 2.7.1 through 10.0.0 allows a low-privileged attacker who can supply Editor content to execute arbitrary JavaScript in another user'…

    Progress Software Kendo UI for Vue
  • Medium 5.4
    CVE-2026-106139

    Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue

    In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker …

    Progress Software Kendo UI for Vue