agentprime: gristlabs-grist-coreEvery new CVE for gristlabs-grist-core.https://agentprime.io/CVE-2026-55664: Grist: Insufficient access control in the /forms endpoint exposes table metadatahttps://agentprime.io/advisories/CVE-2026-55664/https://agentprime.io/advisories/CVE-2026-55664/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:59:12 GMTCVECVE-2026-55665: DOM-based XSS in Grist via unsanitized links, enabling privilege escalationhttps://agentprime.io/advisories/CVE-2026-55665/https://agentprime.io/advisories/CVE-2026-55665/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:58:24 GMTCVECVE-2026-55659: Grist: XSS through unsafe value interpolation in server-rendered pageshttps://agentprime.io/advisories/CVE-2026-55659/https://agentprime.io/advisories/CVE-2026-55659/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:57:39 GMTCVECVE-2026-24002: pyodide sandbox option is insecurehttps://agentprime.io/advisories/CVE-2026-24002/https://agentprime.io/advisories/CVE-2026-24002/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 02:26:28 GMTCVEcriticalCVE-2025-64753: grist-core has insufficient access control in endpoints for comparisons between documents and versionshttps://agentprime.io/advisories/CVE-2025-64753/https://agentprime.io/advisories/CVE-2025-64753/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 21:46:00 GMTCVECVE-2025-64752: grist-core has path to server-side requests via websockethttps://agentprime.io/advisories/CVE-2025-64752/https://agentprime.io/advisories/CVE-2025-64752/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 21:43:57 GMTCVECVE-2024-56359: Cross-site Scripting vulnerability through HyperLink cells in grist-corehttps://agentprime.io/advisories/CVE-2024-56359/https://agentprime.io/advisories/CVE-2024-56359/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Dec 2024 20:24:55 GMTCVECVE-2024-56358: Cross-site Scripting vulnerability through svg attachment previews in grist-corehttps://agentprime.io/advisories/CVE-2024-56358/https://agentprime.io/advisories/CVE-2024-56358/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Dec 2024 20:24:53 GMTCVECVE-2024-56357: Cross-site Scripting vulnerability through custom widget URLs and form redirect URLs in grist-corehttps://agentprime.io/advisories/CVE-2024-56357/https://agentprime.io/advisories/CVE-2024-56357/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Dec 2024 20:24:51 GMTCVE