Vulnerabilities in gristlabs
9 resultsVexday analysis
A Grist Labs apresenta um perfil de risco moderado com 9 vulnerabilidades catalogadas, das quais 1 é crítica e 3 foram publicadas recentemente. Não há evidência de exploração ativa em cenários de produção (KEV zerado), reduzindo a urgência tática. A fraqueza dominante (CWE-79 - Cross-site Scripting) aponta vulnerabilidades típicas de aplicações web, demandando controles de validação de entrada como prioridade.
CVE-2026-24002CRITICALpyodide sandbox option is insecureEPSS 0.5%CVE-2026-55665HIGHDOM-based XSS in Grist via unsanitized links, enabling privilege escalationEPSS 0.3%CVE-2024-56357HIGHCross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-coreEPSS 0.3%CVE-2024-56359HIGHCross-site Scripting vulnerability through HyperLink cells in grist-coreEPSS 0.3%CVE-2024-56358HIGHCross-site Scripting vulnerability through svg attachment previews in grist-coreEPSS 0.3%CVE-2026-55659HIGHGrist: XSS through unsafe value interpolation in server-rendered pagesEPSS 0.3%CVE-2026-55664MEDIUMGrist: Insufficient access control in the /forms endpoint exposes table metadataEPSS 0.2%CVE-2025-64752MEDIUMgrist-core has path to server-side requests via websocketEPSS 0.2%CVE-2025-64753MEDIUMgrist-core has insufficient access control in endpoints for comparisons between documents and versionsEPSS 0.2%