Vulnerability library
Security checkSeptember 04, 2024

Prototype pollution in ag-grid-community via the _.mergeDeep function - ag-grid-enterprise

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

High severitynpmag-grid-enterprise

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. Prior versions were also found to be affected.

Recommendation

Update the ag-grid-enterprise package to the latest compatible version. Followings are version details:

  • Affected version(s): < 31.3.4
  • Patched version(s): 31.3.4

References

Could your website be exposed too?

SmartScanner can check your website for Prototype pollution in ag-grid-community via the _.mergeDeep function - ag-grid-enterprise and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated September 04, 2024