CVE-2024-39001

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39001

CVE-2024-39001 affects ag-grid-enterprise v31.3.2, with a prototype pollution path through the _ModuleSupport.jsonApply component. The vulnerability allows an attacker to inject arbitrary properties, enabling arbitrary code execution or DoS, as described in the provided documents. The CVE is corr...

CVE-2024-38996

CVE-2024-38996 affects ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 via prototype pollution in the _.mergeDeep function. Root cause: pollution of object prototypes may allow attacker-controlled properties to impact application state, with potential for arbitrary code execution or Deni...

AG Grid Security Breach

AG Grid is a full-featured, highly customizable JavaScript data grid from AG Grid Open Source. A security vulnerability exists in AG Grid version v31.3.2, which originates from the inclusion of prototype contamination via the component ModuleSupport.jsonApply, which allows an attacker to execute...

ag-grid packages vulnerable to Prototype Pollution

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39001

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39001

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

AG Grid Security Breach

AG Grid is a full-featured, highly customizable JavaScript data grid from AG Grid Open Source. A security vulnerability exists in AG Grid version v31.3.2, which stems from the inclusion of prototype contamination via the mergeDeep function, allowing an attacker to execute arbitrary code or cause ...

PT-2024-28311 · Unknown · Ag-Grid-Community +1

Name of the Vulnerable Software and Affected Versions: ag-grid-community version 31.3.2 ag-grid-enterprise version 31.3.2 Description: The issue is related to a prototype pollution via the .mergeDeep function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS by...

CVE-2024-39001

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Malicious code in @ag-grid-react/lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Cross-site Scripting (XSS)

ag-grid-community is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute malicious Javascript on a user's browser via the function loadTemplate...

GHSA-7P6W-X2GR-RRF8 ag-grid Cross-Site Scripting vulnerability

Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting XSS. Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid. Recommendation Upgrade to version 14.0.0 or later...

ag-grid Cross-Site Scripting vulnerability

Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting XSS. Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid. Recommendation Upgrade to version 14.0.0 or later...

@c12e/cortex-studio-skill-lab-extension (>=0.4.4, <=0.4.7), @faicon/core (>=0.0.24, <=0.0.27) +37 more potentially affected by CVE-2017-16009 via ag-grid (>=18.0.1, <=18.1.2)

ag-grid NPM version =18.0.1, =0.4.4, =0.0.24, =5.2.0-alpha26-fix1, =1.0.2-alpha.0, =1.0.0, =1.0.0, =8.9.0, =0.2.1, =1.0.1, =1.0.0, =0.1.0, =1.1.0 and more Source cves: CVE-2017-16009 Source advisory: OSV:GHSA-WFW3-RGFR-6G67...

XSS via Angular Expression in ag-grid

Affected versions of ag-grid are vulnerable to Cross-site Scripting XSS via Angular Expressions, if used in combination with AngularJS. Recommendation Avoid using ag-grid in combination with AngularJS until a fix is available...

GHSA-WFW3-RGFR-6G67 XSS via Angular Expression in ag-grid

Affected versions of ag-grid are vulnerable to Cross-site Scripting XSS via Angular Expressions, if used in combination with AngularJS. Recommendation Avoid using ag-grid in combination with AngularJS until a fix is available...