Описание
ag-grid Cross-Site Scripting vulnerability
Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.
Recommendation
Upgrade to version 14.0.0 or later.
Пакеты
Наименование
ag-grid
npm
Затронутые версииВерсия исправления
< 14.0.0
14.0.0
Дефекты
CWE-79
Дефекты
CWE-79