@cdmx/wappler_ag_grid (>=1.2.5, <=1.7.8), @cosmotech/ui (>=8.0.0, <=9.0.0) +20 more potentially affected by CVE-2024-38996 via ag-grid-community (>=31.0.0, <=31.3.2)

ag-grid-community NPM version =31.0.0, =1.2.5, =8.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =2.7.9, =31.0.0, =31.1.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =31.0.0, =0.1.65, =0.1.72 and more Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

@crystaldesign/diva-backoffice (>=24.6.0-rc.1, <=24.7.3), @steedos-widgets/ag-grid (>=3.6.2-beta.9, <=6.3.11-beta.13) +4 more potentially affected by CVE-2024-38996 via ag-grid-enterprise (>=31.0.0, <=31.3.2)

ag-grid-enterprise NPM version =31.0.0, =24.6.0-rc.1, =3.6.2-beta.9, =0.1.65, =31.0.0, =0.0.22, =0.0.38 - react-resuable-table 1.0.0 Source cves: CVE-2024-38996 Source advisory: OSV:GHSA-876P-C77M-X2HC...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38996

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the .mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...