Homepage

handsontable@0.38.0 vulnerabilities

Handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

  • latest version

    14.6.1

  • latest non vulnerable version

    15.0.0-next-fdd4480-20241205

  • first published

    8 years ago

  • latest version published

    1 months ago

  • licenses detected

    • MIT
      >=0.0.0-next-00ec5b0-20230510 <7.0.0
  • View handsontable package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the handsontable package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Regular Expression Denial of Service (ReDoS)

    handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

    Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

    How to fix Regular Expression Denial of Service (ReDoS)?

    Upgrade handsontable to version 10.0.0 or higher.

    >=0.23.0 <10.0.0
    • M
    Cross-site Scripting (XSS)

    handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It is possible to insert malicious JavaScript code using Handsontable built-in functionalities.

    How to fix Cross-site Scripting (XSS)?

    Upgrade handsontable to version 8.2.0 or higher.

    >=0.23.0 <8.2.0
    Go back to all versions of this package