Gristlabs vulnerabilities

Products

• Grist-core 9

Newest

• gristlabs grist-core Grist: Insufficient access control in the /forms endpoint exposes table metadata CVE-2026-55664 4.3 MediumJuly 10, 2026
• gristlabs grist-core DOM-based XSS in Grist via unsanitized links, enabling privilege escalation CVE-2026-55665 8.5 HighJuly 10, 2026
• gristlabs grist-core Grist: XSS through unsafe value interpolation in server-rendered pages CVE-2026-55659 7.7 HighJuly 10, 2026
• getgrist grist-core pyodide sandbox option is insecure CVE-2026-24002 9.1 CriticalJanuary 22, 2026
• getgrist grist-core grist-core has insufficient access control in endpoints for comparisons between documents and versions CVE-2025-64753 5.3 MediumNovember 13, 2025
• getgrist grist-core grist-core has path to server-side requests via websocket CVE-2025-64752 6.8 MediumNovember 13, 2025
• getgrist grist-core Cross-site Scripting vulnerability through HyperLink cells in grist-core CVE-2024-56359 8.1 HighDecember 20, 2024
• getgrist grist-core Cross-site Scripting vulnerability through svg attachment previews in grist-core CVE-2024-56358 8.1 HighDecember 20, 2024
• getgrist grist-core Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-core CVE-2024-56357 8.1 HighDecember 20, 2024