CVE-2024-39001

ag-grid packages vulnerable to Prototype Pollution

6.3 MediumFix available

ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.83%Up 0.8 points since Jul 2, 2024

What each source reports

CVE List Score used 6.3

Record: CVE-2024-39001
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-1321
Updated: 2026-11-02

EUVDEUVD-2024-2230 6.3

Record: EUVD-2024-2230
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-328p-362g-r48j 5.3

ag-grid packages vulnerable to Prototype Pollution

Record: GHSA-328p-362g-r48j
CVSS 4.0: 5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-1321
Updated: 2026-11-02

NVD 6.3

Record: CVE-2024-39001
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-1321
Updated: 2026-11-02

OSV 6.3

Record: CVE-2024-39001
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVGHSA-328p-362g-r48j 5.3

ag-grid packages vulnerable to Prototype Pollution

Record: GHSA-328p-362g-r48j
CVSS 4.0: 5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-1321
Updated: 2026-11-02

Show 15 moreShow less

OSVCLSA-2026-1780274969 No score

TuxCare security update for 7 packages (2 CVEs)

TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 25.0.0-tuxcare.1.

Record: CLSA-2026-1780274969
Updated: 2026-11-02

OSVCLSA-2026-1780274970 No score

TuxCare security update for 6 packages (2 CVEs)

TuxCare rebuilt 6 packages to address 2 CVEs. Fixed in 23.0.2-tuxcare.1.

Record: CLSA-2026-1780274970
Updated: 2026-11-02

OSVCLSA-2026-1780274971 No score

TuxCare security update for 6 packages (2 CVEs)

TuxCare rebuilt 6 packages to address 2 CVEs. Fixed in 23.2.1-tuxcare.1.

Record: CLSA-2026-1780274971
Updated: 2026-11-02

OSVCLSA-2026-1780447828 No score

TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 20.2.0-tuxcare.1.

Record: CLSA-2026-1780447828
Updated: 2026-11-02

OSVCLSA-2026-1780447829 No score

TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 21.0.0-tuxcare.1.

Record: CLSA-2026-1780447829
Updated: 2026-11-02

OSVCLSA-2026-1780447846 No score

TuxCare security update for 7 packages (2 CVEs)

TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 26.1.0-tuxcare.1.

Record: CLSA-2026-1780447846
Updated: 2026-11-02

OSVCLSA-2026-1780534254 No score

TuxCare security update for 7 packages (2 CVEs)

TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 26.2.1-tuxcare.1.

Record: CLSA-2026-1780534254
Updated: 2026-11-02

OSVCLSA-2026-1780534255 No score

TuxCare security update for ag-grid-community (2 CVEs)

TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 29.1.0-tuxcare.1.

Record: CLSA-2026-1780534255
Updated: 2026-11-02

OSVCLSA-2026-1780534256 No score

TuxCare security update for ag-grid-community (2 CVEs)

TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 28.2.0-tuxcare.1.

Record: CLSA-2026-1780534256
Updated: 2026-11-02

OSVCLSA-2026-1780534257 No score

TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 28.1.1-tuxcare.1.

Record: CLSA-2026-1780534257
Updated: 2026-11-02

OSVCLSA-2026-1780534258 No score

TuxCare security update for 8 packages (2 CVEs)

TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 28.1.0-tuxcare.1.

Record: CLSA-2026-1780534258
Updated: 2026-11-02

OSVCLSA-2026-1780620668 No score

TuxCare security update for 8 packages (2 CVEs)

TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 30.1.0-tuxcare.1.

Record: CLSA-2026-1780620668
Updated: 2026-11-02

OSVCLSA-2026-1780620671 No score

TuxCare security update for ag-grid-community (2 CVEs)

TuxCare rebuilt ag-grid-community to address 2 CVEs. Fixed in 30.2.0-tuxcare.1.

Record: CLSA-2026-1780620671
Updated: 2026-11-02

OSVCLSA-2026-1780620682 No score

TuxCare security update for 9 packages (2 CVEs)

TuxCare rebuilt 9 packages to address 2 CVEs. Fixed in 31.1.1-tuxcare.1.

Record: CLSA-2026-1780620682
Updated: 2026-11-02

OSVCLSA-2026-1784856319 No score

TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 26.0.0-tuxcare.1.

Record: CLSA-2026-1784856319
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`@ag-grid-enterprise/charts` npm	32.0.0 to 32.0.0	32.0.1
`ag-grid-community` npm	32.0.0 to 32.0.0	32.0.1
`ag-grid-enterprise` npm	32.0.0 to 32.0.0	32.0.1
`@ag-grid-enterprise/charts` npm	before 31.3.4	31.3.4
`ag-grid-community` npm	before 31.3.4	31.3.4
`ag-grid-enterprise` npm	before 31.3.4	31.3.4
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid-polymer` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1

Show 68 moreShow less

Affected packages
Package	Affected	Fixed
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	25.0.0-tuxcare.0 up to 25.0.0-tuxcare.1, plus listed versions 25.0.0	25.0.0-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid-polymer` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	23.0.2-tuxcare.0 up to 23.0.2-tuxcare.1, plus listed versions 23.0.2	23.0.2-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-polymer` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	23.2.1-tuxcare.0 up to 23.2.1-tuxcare.1, plus listed versions 23.2.1	23.2.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	20.2.0-tuxcare.0 up to 20.2.0-tuxcare.1, plus listed versions 20.2.0	20.2.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	20.2.0-tuxcare.0 up to 20.2.0-tuxcare.1, plus listed versions 20.2.0	20.2.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	21.0.0-tuxcare.0 up to 21.0.0-tuxcare.1, plus listed versions 21.0.0	21.0.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	21.0.0-tuxcare.0 up to 21.0.0-tuxcare.1, plus listed versions 21.0.0	21.0.0-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-polymer` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	26.1.0-tuxcare.0 up to 26.1.0-tuxcare.1, plus listed versions 26.1.0	26.1.0-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-polymer` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	26.2.1-tuxcare.0 up to 26.2.1-tuxcare.1, plus listed versions 26.2.1	26.2.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	29.1.0-tuxcare.0 up to 29.1.0-tuxcare.1, plus listed versions 29.1.0	29.1.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	28.2.0-tuxcare.0 up to 28.2.0-tuxcare.1, plus listed versions 28.2.0	28.2.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	28.1.1-tuxcare.0 up to 28.1.1-tuxcare.1, plus listed versions 28.1.1	28.1.1-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	28.1.1-tuxcare.0 up to 28.1.1-tuxcare.1, plus listed versions 28.1.1	28.1.1-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-angular` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-angular-legacy` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	28.1.0-tuxcare.0 up to 28.1.0-tuxcare.1, plus listed versions 28.1.0	28.1.0-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-angular` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-solid` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	30.1.0-tuxcare.0 up to 30.1.0-tuxcare.1, plus listed versions 30.1.0	30.1.0-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	30.2.0-tuxcare.0 up to 30.2.0-tuxcare.1, plus listed versions 30.2.0	30.2.0-tuxcare.1
`ag-grid` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-angular` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-charts-enterprise` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-react` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-solid` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-vue` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-vue3` TuxCare:npm From an advisory covering 2 CVEs	31.1.1-tuxcare.0 up to 31.1.1-tuxcare.1, plus listed versions 31.1.1	31.1.1-tuxcare.1
`ag-grid-community` TuxCare:npm From an advisory covering 2 CVEs	26.0.0-tuxcare.0 up to 26.0.0-tuxcare.1, plus listed versions 26.0.0	26.0.0-tuxcare.1
`ag-grid-enterprise` TuxCare:npm From an advisory covering 2 CVEs	26.0.0-tuxcare.0 up to 26.0.0-tuxcare.1, plus listed versions 26.0.0	26.0.0-tuxcare.1
`@ag-grid-enterprise/charts` npm	32.0.0 up to 32.0.1	32.0.1
`ag-grid-community` npm	32.0.0 up to 32.0.1	32.0.1
`ag-grid-enterprise` npm	32.0.0 up to 32.0.1	32.0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-39001 is a medium vulnerability (CVSS 6.3) in Ag-grid, published July 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. Fixed in @ag-grid-enterprise/charts 32.0.1.

References

Show 6 moreShow less