TI-2026-19341 CVE-2026-24002
pyodide sandbox option is insecure
Priority MEDIUM 43
Grist is spreadsheet software using Python as its formula language.
gristlabs
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
gristlabs records in CISA KEVNo gristlabs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2026-40187 CVE-2026-55665
DOM-based XSS in Grist via unsanitized links, enabling privilege escalation
Priority LOW 37
Grist is spreadsheet software using Python as its formula language.
TI-2024-37319 CVE-2024-56359
Cross-site Scripting vulnerability through HyperLink cells in grist-core
Priority LOW 37
grist-core is a spreadsheet hosting server.
TI-2024-37318 CVE-2024-56358
Cross-site Scripting vulnerability through svg attachment previews in grist-core
Priority LOW 37
grist-core is a spreadsheet hosting server.
TI-2024-37317 CVE-2024-56357
Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-core
Priority LOW 37
grist-core is a spreadsheet hosting server.
Priority LOW 34
Grist is spreadsheet software using Python as its formula language.
Priority LOW 30
grist-core is a spreadsheet hosting server.
TI-2025-40091 CVE-2025-64753
grist-core has insufficient access control in endpoints for comparisons between documents and versions
Priority LOW 28
grist-core is a spreadsheet hosting server.
TI-2026-40186 CVE-2026-55664
Grist: Insufficient access control in the /forms endpoint exposes table metadata
Priority LOW 20
Grist is spreadsheet software using Python as its formula language.