gristlabs vulnerabilities
9 published CVEs name gristlabs among the affected products.
- 9Published CVEs9 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55664
Grist: Insufficient access control in the /forms endpoint exposes table metadata
gristlabs · grist-core
Medium4.3 - CVE-2026-55665
DOM-based XSS in Grist via unsanitized links, enabling privilege escalation
gristlabs · grist-core
High8.5 - CVE-2026-55659
Grist: XSS through unsafe value interpolation in server-rendered pages
gristlabs · grist-core
High7.7 - CVE-2026-24002
pyodide sandbox option is insecure
gristlabs · grist-core
Critical9.1 - CVE-2025-64753
grist-core has insufficient access control in endpoints for comparisons between documents and versions
gristlabs · grist-core
Medium5.3 - CVE-2025-64752
grist-core has path to server-side requests via websocket
gristlabs · grist-core
Medium6.8 - CVE-2024-56359
Cross-site Scripting vulnerability through HyperLink cells in grist-core
gristlabs · grist-core
High8.1 - CVE-2024-56358
Cross-site Scripting vulnerability through svg attachment previews in grist-core
gristlabs · grist-core
High8.1 - CVE-2024-56357
Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-core
gristlabs · grist-core
High8.1