VYPR
← All advisories
High severityNVD Advisory· Published Jul 1, 2024· Updated Aug 2, 2024

CVE-2024-38996

CVE-2024-38996

Description

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ag-grid-enterprisenpm
< 31.3.431.3.4
ag-grid-communitynpm
< 31.3.431.3.4

Affected products

50

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.