Skip to content
OpenAdvisories

Package · npm

ag-grid

2 known vulnerabilities.

2 results · Feed

  • High —

    ag-grid Cross-Site Scripting vulnerability

    Versions of `ag-grid` prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid. ## Recommendation Upgrade to version 14…

  • Medium 6.1

    XSS via Angular Expression in ag-grid

    ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid.