GHSA-wfw3-rgfr-6g67

GitHub Security Advisory

XSS via Angular Expression in ag-grid

✓ GitHub Reviewed MODERATE Has CVE

Affected versions of `ag-grid` are vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if used in combination with AngularJS.

## Recommendation

Avoid using `ag-grid` in combination with AngularJS until a fix is available.

npm ag-grid

Affected versions: 0 (last affected: 18.1.3-beta.1)

CVE-2017-16009

GHSA ID

GHSA-wfw3-rgfr-6g67

Published

September 1, 2020 4:40 PM

Last Modified

March 24, 2023 9:26 PM

CVSS Score

5.0 /10

Primary Ecosystem

npm

Primary Package

ag-grid

GitHub Reviewed

✓ Yes

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.