ag-grid Cross-Site Scripting vulnerability

ÉLEVÉEGHSA-7p6w-x2gr-rrf8 · Published 02/09/2020 · updated 10/07/2025

En bref

GHSA-7p6w-x2gr-rrf8 est une vulnérabilité ÉLEVÉE touchant ag-grid.
Correctif : mettre à jour vers 14.0.0 ou plus récent.

Package	Affected versions	Patched versions
ag-grid npm	`< 14.0.0`	`14.0.0`

Description

Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.

Recommendation

Upgrade to version 14.0.0 or later.

References

ag-grid/ag-grid · WEB
github/advisory-database · WEB
ag-grid/ag-grid commit b66b1dd · WEB
ag-grid/ag-grid · PACKAGE

Autres vulnérabilités de ag-grid

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free