Gristlabs vulnerabilities
We track 3 vulnerabilities in Gristlabs products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.
Latest Gristlabs vulnerabilities
- 8.5 High severity
grist-core: Improper Neutralization of Input During Web Page Generation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a
- 7.7 High severity
grist-core: Improper Neutralization of Input During Web Page Generation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embedded user-controlled values into the page and into inline scripts without fully escaping them, allowing cross-site scripting. On the ma
- 9.6 Critical severity
grist-core: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, but pyodide on