Vulnerabilities in gristlabs
6 resultsCVE-2026-24002CRITICALpyodide sandbox option is insecureEPSS 0.5%CVE-2024-56357HIGHCross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-coreEPSS 0.3%CVE-2024-56359HIGHCross-site Scripting vulnerability through HyperLink cells in grist-coreEPSS 0.3%CVE-2024-56358HIGHCross-site Scripting vulnerability through svg attachment previews in grist-coreEPSS 0.3%CVE-2025-64752MEDIUMgrist-core has path to server-side requests via websocketEPSS 0.2%CVE-2025-64753MEDIUMgrist-core has insufficient access control in endpoints for comparisons between documents and versionsEPSS 0.2%