GHSA-7p6w-x2gr-rrf8
ag-grid Cross-Site Scripting vulnerability
Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.
Recommendation
Upgrade to version 14.0.0 or later.
What each source reports
GitHub AdvisoriesNo score
ag-grid Cross-Site Scripting vulnerability
Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.
Recommendation
Upgrade to version 14.0.0 or later.
- Record
GHSA-7p6w-x2gr-rrf8- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVNo score
ag-grid Cross-Site Scripting vulnerability
Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.
Recommendation
Upgrade to version 14.0.0 or later.
- Record
GHSA-7p6w-x2gr-rrf8- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ag-gridnpm | before 14.0.0 | 14.0.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-7p6w-x2gr-rrf8 is a vulnerability with no CVSS score yet in ag-grid, published September 2, 2020. No source lists public exploit code. Fixed in ag-grid 14.0.0.