93 matches found
CLSA-2026-1780534255 TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 29.1.0-tuxcare.1...
CLSA-2026-1780620671 TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 30.2.0-tuxcare.1...
CLSA-2026-1780534256 TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 28.2.0-tuxcare.1...
CLSA-2026-1780361415 TuxCare security update for ag-grid (1 CVE)
TuxCare rebuilt ag-grid to address 1 CVE. Fixed in 17.1.0-tuxcare.1...
PT-2026-74914
TuxCare rebuilt ag-grid to address 1 CVE. Fixed in 17.1.0-tuxcare.1...
PT-2026-118534
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 28.2.0-tuxcare.1...
PT-2026-118533
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 29.1.0-tuxcare.1...
PT-2026-118535
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 30.2.0-tuxcare.1...
MAL-2026-11365 Malicious code in react-ag-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97513e8d4f7818787a09bd36b9c59997b9c98aeb4d731662c4092cb37fe9d687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11235 Malicious code in ag-grid-boost (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview react-ag-grid is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in react-ag-grid
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in ag-grid-boost
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview ag-grid-boost is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in react-ag-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97513e8d4f7818787a09bd36b9c59997b9c98aeb4d731662c4092cb37fe9d687 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ag-grid-boost (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48a0535bdc8dc48399716c0e05646161556ce93b7b3cfeb7ba095e9bc3e1df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @ag-grid-react/lib (npm)
--- Credit: OpenSSF source...
@vmaimone/vm-grid (>=1.0.0, <=1.0.11), busylib (1.0.0) +5 more potentially affected by unknown CVE via ag-grid (>=3.3.3, <=5.0.0-alpha.2)
ag-grid NPM version =3.3.3, =1.0.0, =0.0.3, =0.0.6, =0.0.9, =0.0.15, =0.0.35 - sdp-app 0.0.0 Source cves: unknown CVE Source advisory: MEND:WS-2017-0133...
CVE-2024-39001
ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
