ag-grid Cross-Site Scripting vulnerability

ALTOGHSA-7p6w-x2gr-rrf8 · Published 02/09/2020 · updated 10/07/2025

In breve

GHSA-7p6w-x2gr-rrf8 è una vulnerabilità ALTO che riguarda ag-grid.
Correzione: aggiornare a 14.0.0 o successiva.

Package	Affected versions	Patched versions
ag-grid npm	`< 14.0.0`	`14.0.0`

Description

Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.

Recommendation

Upgrade to version 14.0.0 or later.

References

ag-grid/ag-grid · WEB
github/advisory-database · WEB
ag-grid/ag-grid commit b66b1dd · WEB
ag-grid/ag-grid · PACKAGE

Altre vulnerabilità di ag-grid

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free