grist | Snyk

Direct Vulnerabilities

Known vulnerabilities in the grist package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Information Exposure Through Caching	<1.7.16-r0
L Improper Encoding or Escaping of Output	<1.7.20-r0
L Algorithmic Complexity	<1.7.20-r0
L Allocation of Resources Without Limits or Throttling	<1.7.20-r0
L Improper Validation of Syntactic Correctness of Input	<1.7.20-r0
L XML Injection	<1.7.20-r0
L XML Injection	<1.7.20-r0
L XML Injection	<1.7.20-r0
L Resource Exhaustion	<1.7.20-r0
L Resource Exhaustion	<1.7.20-r0
L XML Injection	<1.7.20-r0
L CVE-2026-82562	<1.7.19-r0
L Improper Input Validation	<1.7.18-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1.7.18-r0
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1.7.18-r0
L GHSA-55q2-fjhq-7xh7	<1.7.18-r0
L Incorrect Type Conversion or Cast	<1.7.18-r0
L CVE-2026-5078	<1.7.18-r0
M CVE-2026-16728	<1.7.18-r0
L CVE-2026-18446	<1.7.18-r0
H Resource Exhaustion	<1.7.18-r0
L Algorithmic Complexity	<1.7.18-r0
H Information Exposure	<1.7.18-r0
L Loop with Unreachable Exit Condition ('Infinite Loop')	<1.7.18-r0
M Resource Exhaustion	<1.7.18-r0
L Uncaught Exception	<1.7.18-r0
L Improper Resource Shutdown or Release	<1.7.18-r0
M CVE-2026-15157	<1.7.18-r0
L GHSA-c2j3-45gr-mqc4	<1.7.18-r0
L GHSA-hcpx-6fm6-wx23	<1.7.18-r0
L CVE-2026-16221	<1.7.18-r0
M CVE-2026-16729	<1.7.18-r0
L CVE-2026-13311	<1.7.18-r0
L Resource Exhaustion	<1.7.18-r0
L CVE-2026-13676	<1.7.18-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1.7.18-r0
H Resource Exhaustion	<1.7.18-r0
H Allocation of Resources Without Limits or Throttling	<1.7.18-r0
L Arbitrary Code Injection	<1.7.18-r0
H Permissive Whitelist	<1.7.18-r0
L Allocation of Resources Without Limits or Throttling	<1.7.18-r0
H Inefficient Regular Expression Complexity	<1.7.17-r0
L GHSA-vxr8-fq34-vvx9	<1.7.16-r0
L GHSA-gvmj-g25r-r7wr	<1.7.16-r0
L GHSA-cmwh-pvxp-8882	<1.7.16-r0
L GHSA-x4vx-rjvf-j5p4	<1.7.16-r0
L Cross-site Scripting (XSS)	<1.7.16-r0
L Arbitrary Code Injection	<1.7.16-r0
M Cross-site Scripting (XSS)	<1.7.16-r0
L Interpretation Conflict	<1.7.16-r0
L Cross-site Scripting (XSS)	<1.7.16-r0
L GHSA-9ggv-8w38-r7pm	<1.7.16-r0
L GHSA-76mc-f452-cxcm	<1.7.16-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1.7.17-r0
L Directory Traversal	<1.7.16-r0
L CVE-2026-4867	*
L Improper Verification of Cryptographic Signature	*
M Directory Traversal	<1.7.16-r0
L CVE-2026-12143	*
L Resource Exhaustion	*
M Improper Handling of Unicode Encoding	<1.7.16-r0
L Improper Input Validation	<1.7.16-r0
M Directory Traversal	<1.7.16-r0
H Directory Traversal	<1.7.16-r0

Vulnerability

Vulnerable Version

Information Exposure Through Caching

<1.7.16-r0