GitHub Advisoryadvisory · npm

GHSA-7p6w-x2gr-rrf8 ag-grid Cross-Site Scripting vulnerability

HIGH Published 2020-09-02 Modified 2025-07-10 Official page ↗
Ecosystem
npm
Packages
ag-grid
Severity
High
Weaknesses
CWE-79
Reviewed
2020-08-31

Affected packages

• npm ag-grid: < 14.0.0 → fixed in 14.0.0

Description

Versions of `ag-grid` prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid. Recommendation Upgrade to version 14.0.0 or later.

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References