VDB
Sign up
MEDIUM6.1

GHSA-wfw3-rgfr-6g67

XSS via Angular Expression in ag-grid

Details

Affected versions of `ag-grid` are vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if used in combination with AngularJS.

## Recommendation

Avoid using `ag-grid` in combination with AngularJS until a fix is available.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/ag-grid
Introduced in: 0

No fixed version published yet for ag-grid (npm). Pin to a known-safe version or switch to an alternative.

References