Vendorsgetgristgrist-coreany version
Vulnerabilities

getgrist grist-core any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2026-24002
pyodide sandbox option is insecure
Published 2026-01-22 · Analyzed
9.6EPSS 0.005
CVE-2024-56357
Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-core
Published 2024-12-20 · Analyzed
8.1EPSS 0.003
CVE-2024-56359
Cross-site Scripting vulnerability through HyperLink cells in grist-core
Published 2024-12-20 · Analyzed
8.1EPSS 0.003
CVE-2024-56358
Cross-site Scripting vulnerability through svg attachment previews in grist-core
Published 2024-12-20 · Analyzed
8.1EPSS 0.003
CVE-2025-64752
grist-core has path to server-side requests via websocket
Published 2025-11-13 · Analyzed
6.8EPSS 0.002
CVE-2025-64753
grist-core has insufficient access control in endpoints for comparisons between documents and versions
Published 2025-11-13 · Analyzed
6.5EPSS 0.002