CVE-2024-38996
Prototype pollution in ag-grid-community via the _.mergeDeep function
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
9.8
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
- Record
CVE-2024-38996- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1321
- Updated
- 2026-11-02
EUVDEUVD-2024-2292
9.8
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
- Record
EUVD-2024-2292- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-876p-c77m-x2hc
8.9
Prototype pollution in ag-grid-community via the _.mergeDeep function
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Prior versions were also found to be affected.
- Record
GHSA-876p-c77m-x2hc- CVSS 4.0
- 8.9 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1321
- Updated
- 2026-11-02
NVD
9.8
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
- Record
CVE-2024-38996- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1321
- Updated
- 2026-11-02
OSV
9.8
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
- Record
CVE-2024-38996- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-876p-c77m-x2hc
8.9
Prototype pollution in ag-grid-community via the _.mergeDeep function
ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Prior versions were also found to be affected.
- Record
GHSA-876p-c77m-x2hc- CVSS 4.0
- 8.9 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1321
- Updated
- 2026-11-02
Show 15 moreShow less
OSVCLSA-2026-1780274969 No score
TuxCare security update for 7 packages (2 CVEs)
TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 25.0.0-tuxcare.1.
- Record
CLSA-2026-1780274969- Updated
- 2026-11-02
OSVCLSA-2026-1780274970 No score
TuxCare security update for 6 packages (2 CVEs)
TuxCare rebuilt 6 packages to address 2 CVEs. Fixed in 23.0.2-tuxcare.1.
- Record
CLSA-2026-1780274970- Updated
- 2026-11-02
OSVCLSA-2026-1780274971 No score
TuxCare security update for 6 packages (2 CVEs)
TuxCare rebuilt 6 packages to address 2 CVEs. Fixed in 23.2.1-tuxcare.1.
- Record
CLSA-2026-1780274971- Updated
- 2026-11-02
OSVCLSA-2026-1780447828 No score
TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 20.2.0-tuxcare.1.
- Record
CLSA-2026-1780447828- Updated
- 2026-11-02
OSVCLSA-2026-1780447829 No score
TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 21.0.0-tuxcare.1.
- Record
CLSA-2026-1780447829- Updated
- 2026-11-02
OSVCLSA-2026-1780447846 No score
TuxCare security update for 7 packages (2 CVEs)
TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 26.1.0-tuxcare.1.
- Record
CLSA-2026-1780447846- Updated
- 2026-11-02
OSVCLSA-2026-1780534254 No score
TuxCare security update for 7 packages (2 CVEs)
TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 26.2.1-tuxcare.1.
- Record
CLSA-2026-1780534254- Updated
- 2026-11-02
OSVCLSA-2026-1780534255 No score
TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 29.1.0-tuxcare.1.
- Record
CLSA-2026-1780534255- Updated
- 2026-11-02
OSVCLSA-2026-1780534256 No score
TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 28.2.0-tuxcare.1.
- Record
CLSA-2026-1780534256- Updated
- 2026-11-02
OSVCLSA-2026-1780534257 No score
TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 28.1.1-tuxcare.1.
- Record
CLSA-2026-1780534257- Updated
- 2026-11-02
OSVCLSA-2026-1780534258 No score
TuxCare security update for 8 packages (2 CVEs)
TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 28.1.0-tuxcare.1.
- Record
CLSA-2026-1780534258- Updated
- 2026-11-02
OSVCLSA-2026-1780620668 No score
TuxCare security update for 8 packages (2 CVEs)
TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 30.1.0-tuxcare.1.
- Record
CLSA-2026-1780620668- Updated
- 2026-11-02
OSVCLSA-2026-1780620671 No score
TuxCare security update for ag-grid-community (2 CVEs)
TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 30.2.0-tuxcare.1.
- Record
CLSA-2026-1780620671- Updated
- 2026-11-02
OSVCLSA-2026-1780620682 No score
TuxCare security update for 9 packages (2 CVEs)
TuxCare rebuilt 9 packages to address 2 CVEs. Fixed in 31.1.1-tuxcare.1.
- Record
CLSA-2026-1780620682- Updated
- 2026-11-02
OSVCLSA-2026-1784856319 No score
TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 26.0.0-tuxcare.1.
- Record
CLSA-2026-1784856319- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ag-grid-enterprisenpm |
before 31.3.4 | 31.3.4 |
ag-grid-communitynpm |
before 31.3.4 | 31.3.4 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-polymerTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0 |
25.0.0-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
ag-grid-polymerTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2 |
23.0.2-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-polymerTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1 |
23.2.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
20.2.0-tuxcare.0 up to 20.2.0-tuxcare.1, plus listed versions 20.2.0 |
20.2.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
20.2.0-tuxcare.0 up to 20.2.0-tuxcare.1, plus listed versions 20.2.0 |
20.2.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
21.0.0-tuxcare.0 up to 21.0.0-tuxcare.1, plus listed versions 21.0.0 |
21.0.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
21.0.0-tuxcare.0 up to 21.0.0-tuxcare.1, plus listed versions 21.0.0 |
21.0.0-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-polymerTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0 |
26.1.0-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-polymerTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1 |
26.2.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
29.1.0-tuxcare.0 up to 29.1.0-tuxcare.1, plus listed versions 29.1.0 |
29.1.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
28.2.0-tuxcare.0 up to 28.2.0-tuxcare.1, plus listed versions 28.2.0 |
28.2.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
28.1.1-tuxcare.0 up to 28.1.1-tuxcare.1, plus listed versions 28.1.1 |
28.1.1-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
28.1.1-tuxcare.0 up to 28.1.1-tuxcare.1, plus listed versions 28.1.1 |
28.1.1-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-angularTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-angular-legacyTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0 |
28.1.0-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-angularTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-solidTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0 |
30.1.0-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
30.2.0-tuxcare.0 up to 30.2.0-tuxcare.1, plus listed versions 30.2.0 |
30.2.0-tuxcare.1 |
ag-gridTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-angularTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-charts-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-reactTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-solidTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-vueTuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-vue3TuxCare:npm From an advisory covering 2 CVEs |
31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1 |
31.1.1-tuxcare.1 |
ag-grid-communityTuxCare:npm From an advisory covering 2 CVEs |
26.0.0-tuxcare.0 up to 26.0.0-tuxcare.1, plus listed versions 26.0.0 |
26.0.0-tuxcare.1 |
ag-grid-enterpriseTuxCare:npm From an advisory covering 2 CVEs |
26.0.0-tuxcare.0 up to 26.0.0-tuxcare.1, plus listed versions 26.0.0 |
26.0.0-tuxcare.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-38996 is a critical vulnerability (CVSS 9.8) in Ag-grid, published July 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. Fixed in ag-grid-enterprise 31.3.4.
References
gist.github.com/mestrtee/c1590660750744f25e86ba1bf240844b
gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b
gist.github.com/mestrtee/18e8c27f3a6376e7cf082cfe1ca766fa
nvd.nist.gov/vuln/detail/CVE-2024-38996
github.com/ag-grid/ag-grid/pull/8290
github.com/advisories/GHSA-876p-c77m-x2hc
github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38996.json
github.com/ag-grid/ag-grid