What is GHSA-7p6w-x2gr-rrf8?

GHSA-7p6w-x2gr-rrf8 is a security advisory published by GitHub Security Advisories with High severity. ag-grid Cross-Site Scripting vulnerability

Why does GHSA-7p6w-x2gr-rrf8 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-7p6w-x2gr-rrf8?

GHSA-7p6w-x2gr-rrf8 affects 1 product, including: npm/ag-grid:\u003c 14.0.0.

GHSA-7p6w-x2gr-rrf8HighDisclosed before NVD

ag-grid Cross-Site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

September 2, 2020

Last Modified

July 10, 2025

📋 Description

Versions of ag-grid prior to 14.0.0 are vulnerable to Cross-Site Scripting (XSS). Grid contents are not properly sanitized and may allow attackers to execute arbitrary JavaScript if user input is rendered in the grid.

Recommendation

Upgrade to version 14.0.0 or later.

🎯 Affected products1

npm/ag-grid:< 14.0.0

🔗 References (4)

https://github.com/ag-grid/ag-grid/issues/1961
https://github.com/ag-grid/ag-grid/commit/b66b1ddf73056714f6574e054d6e05d6ba531ce8
https://github.com/github/advisory-database/issues/5799
https://github.com/advisories/GHSA-7p6w-x2gr-rrf8