grist-core vulnerabilities
3 known vulnerabilities in grist-core from Gristlabs. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
grist-core: Improper Neutralization of Input During Web Page Generation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a
- 7.7 High severity
grist-core: Improper Neutralization of Input During Web Page Generation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embedded user-controlled values into the page and into inline scripts without fully escaping them, allowing cross-site scripting. On the ma
- 9.6 Critical severity
grist-core: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, but pyodide on