GR
Vendor
gristlabs
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55664 | GR grist-core gristlabs | 4.3 | Jul 10 | Grist: Insufficient access control in the /forms endpoint exposes table metadata |
| CVE-2026-55665 | GR grist-core gristlabs | 8.5 | Jul 10 | DOM-based XSS in Grist via unsanitized links, enabling privilege escalation |
| CVE-2026-55659 | GR grist-core gristlabs | 7.7 | Jul 10 | Grist: XSS through unsafe value interpolation in server-rendered pages |
| CVE-2026-24002 | GR grist-core gristlabs | 9.6 | Jan 22 | pyodide sandbox option is insecure |
| CVE-2025-64753 | GR grist-core gristlabs | 6.5 | Nov 13 | grist-core has insufficient access control in endpoints for comparisons between documents and versions |
| CVE-2025-64752 | GR grist-core gristlabs | 6.5 | Nov 13 | grist-core has path to server-side requests via websocket |
| CVE-2024-56359 | GR grist-core gristlabs | 6.1 | Dec 20 | Cross-site Scripting vulnerability through HyperLink cells in grist-core |
| CVE-2024-56358 | GR grist-core gristlabs | 6.1 | Dec 20 | Cross-site Scripting vulnerability through svg attachment previews in grist-core |
| CVE-2024-56357 | GR grist-core gristlabs | 6.1 | Dec 20 | Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-core |