Regular Expression Denial of Service (ReDoS)

Overview handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in Handsontable.helper.isNumeric function. Details Denial of Service DoS describes a family of attacks,...

Regular Expression Denial of Service (ReDoS)

Overview Handsontable is a data grid component with an Excel-like appearance. Built in JavaScript, it integrates with any data source and comes with features like data validation, sorting, grouping, data binding or column ordering. Affected versions of this package are vulnerable to Regular...

Cross-Site Scripting (XSS)

handsontable is vulnerable to Cross-Site Scripting XSS. The package fails to sanitize HTML before displaying on a user's browser, allowing an attacker to insert and execute arbitrary Javascript via the built-in functionalities...