@c12e/cortex-studio-skill-lab-extension (>=0.4.4, <=0.4.7), @faicon/core (>=0.0.24, <=0.0.27) +37 more potentially affected by CVE-2017-16009 via ag-grid (>=18.0.1, <=18.1.2)

ag-grid NPM version =18.0.1, =0.4.4, =0.0.24, =5.2.0-alpha26-fix1, =1.0.2-alpha.0, =1.0.0, =1.0.0, =8.9.0, =0.2.1, =1.0.1, =1.0.0, =0.1.0, =1.1.0 and more Source cves: CVE-2017-16009 Source advisory: OSV:GHSA-WFW3-RGFR-6G67...

CVE-2017-16009

The CVE-2017-16009 entry affects ag-grid when used with AngularJS, where Angular Expressions can be exploited to trigger Cross-site Scripting (XSS). The vulnerability arises from how AngularJS interacts with ag-grid, enabling injected expressions to run in the context of the page. Several connect...