Skip to content
OpenAdvisories

Package · npm

ag-grid-community

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2024-39001

    ag-grid packages vulnerable to Prototype Pollution

    ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    ag-grid-enterprise ag-grid-community @ag-grid-enterprise/charts npm
  • Critical 9.8
    CVE-2024-38996

    Prototype pollution in ag-grid-community via the _.mergeDeep function

    ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary pr…

    ag-grid-enterprise ag-grid-community npm