VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 1, 2024· Updated Jun 17, 2026

CVE-2024-38996

CVE-2024-38996

Description

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ag-grid-enterprisenpm
< 31.3.431.3.4
ag-grid-communitynpm
< 31.3.431.3.4

Affected products

51

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.