{"schemaVersion":3,"id":"CVE-2024-39001","aliases":["GHSA-328p-362g-r48j","CGA-24gq-qcvw-p7f8","CGA-28jg-69h8-fpq5","CGA-2hfh-676v-g39j","CGA-2qx3-cxpp-hg26","CGA-2wwm-4qxc-xh2c","CGA-2xqc-7fjh-36q7","CGA-38mc-jgfq-43fv","CGA-3mmc-7gvg-6hcg","CGA-3v2f-vp7m-g22p","CGA-3x8x-2992-mg3v","CGA-4j3p-f64w-m375","CGA-4ph3-gcj6-8qvq","CGA-4vvv-678h-fxrx","CGA-557h-qpq6-fpj9","CGA-5872-f47m-h9hc","CGA-58p4-cxrx-mjpp","CGA-58p6-hxqx-x3x7","CGA-5gjj-gvhx-p64r","CGA-6f9c-p7fq-px25","CGA-6g83-fhx2-f4fv","CGA-6gjg-xcxj-j49c","CGA-6mj2-mgg4-crqx","CGA-7cf4-jj9m-7927","CGA-7h2w-rgwq-6rc3","CGA-8779-mw58-298g","CGA-979p-8j4x-vhfc","CGA-98v6-pjxg-4gw6","CGA-99vh-583c-9x7m","CGA-9g87-94hg-9qc8","CGA-9vhm-34x4-vwjv","CGA-c36p-qhvq-wr92","CGA-c5hc-ggw2-q8f4","CGA-cpm7-6593-gxhq","CGA-f635-cqvf-vcmc","CGA-g9w3-gjjj-wrhx","CGA-ggg2-jcr4-w2mc","CGA-gpr3-68f7-w298","CGA-grjp-chq4-g5qv","CGA-j4vg-jpfp-8m9p","CGA-j69w-vgr5-x228","CGA-j7h4-8mmm-wcjg","CGA-m92m-m8wx-phhv","CGA-p35v-h5px-c7gx","CGA-p4hj-g7v2-x98q","CGA-p72c-cch7-35p9","CGA-pmm6-6qhx-m765","CGA-pw8m-vx2r-3f8r","CGA-px75-cvmr-6hg8","CGA-qpj4-jcm9-4v6q","CGA-qr4w-2fv2-7358","CGA-qv6r-pxh4-xjhr","CGA-r8q6-hj22-m633","CGA-r9wh-cr5f-6532","CGA-rp46-wr7w-8pxv","CGA-rrj5-6qw3-44c6","CGA-v8v7-8mhm-m29x","CGA-vh3f-9wwh-g7qx","CGA-wj7r-v824-8ggf","CGA-wjgv-2qqv-84x5","CGA-x44p-q3vj-882w"],"status":"published","duplicateOf":null,"title":null,"description":"ag-grid-enterprise v31.3.2 was discovered to contain a prototype pollution via the component _ModuleSupport.jsonApply. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.","dates":{"published":"2024-07-01T00:00:00.000Z","modified":"2024-08-02T04:19:20.486Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":7.2,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":7.2,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00827,"percentile":0.56703,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00827},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00827,"percentile":0.56703}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00827,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00827,"percentile":0.56703}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_MESTRTEE_C1590660750744F25E86BA1BF240844B","name":"C1590660750744F25E86Ba1Bf240844B","source":"github","url":"https://gist.github.com/mestrtee/c1590660750744f25e86ba1bf240844b","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"GITHUB_MESTRTEE_F8037D492DAB0D77BCA719E05D31C08B","name":"F8037D492Dab0D77Bca719E05D31C08B","source":"github","url":"https://gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"GITHUB_MESTRTEE_18E8C27F3A6376E7CF082CFE1CA766FA","name":"18E8C27F3A6376E7Cf082Cfe1Ca766Fa","source":"github","url":"https://gist.github.com/mestrtee/18e8c27f3a6376e7cf082cfe1ca766fa","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-1321","name":"Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')","description":"The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1321.html"}],"affected":[{"vendor":"ag-grid","product":"ag_charts","name":"ag charts","label":"ag_charts","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 9.3.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0, < 10.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.2 | ≥ 10.0.0, < 10.0.2","eol":null,"hubHref":"/vendor/ag-grid/ag_charts"},{"vendor":"ag-grid","product":"ag-grid","name":"ag-grid","label":"ag-grid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 31.3.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 32.0.0, < 32.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 31.3.4 | ≥ 32.0.0, < 32.0.2","eol":null,"hubHref":"/vendor/ag-grid/ag-grid"},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-alerting-dashboards-plugin","name":"opensearch-dashboards-2-alerting-dashboards-plugin","label":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-config","name":"opensearch-dashboards-2-config","label":"opensearch-dashboards-2-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-config","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-maps","name":"opensearch-dashboards-2-dashboards-maps","label":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-notifications","name":"opensearch-dashboards-2-dashboards-notifications","label":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-observability","name":"opensearch-dashboards-2-dashboards-observability","label":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-query-workbench","name":"opensearch-dashboards-2-dashboards-query-workbench","label":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-reporting","name":"opensearch-dashboards-2-dashboards-reporting","label":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-search-relevance","name":"opensearch-dashboards-2-dashboards-search-relevance","label":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-visualizations","name":"opensearch-dashboards-2-dashboards-visualizations","label":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-config","name":"opensearch-dashboards-2-fips-config","label":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-maps","name":"opensearch-dashboards-2-fips-dashboards-maps","label":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-notifications","name":"opensearch-dashboards-2-fips-dashboards-notifications","label":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-observability","name":"opensearch-dashboards-2-fips-dashboards-observability","label":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-query-workbench","name":"opensearch-dashboards-2-fips-dashboards-query-workbench","label":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-reporting","name":"opensearch-dashboards-2-fips-dashboards-reporting","label":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-search-relevance","name":"opensearch-dashboards-2-fips-dashboards-search-relevance","label":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-visualizations","name":"opensearch-dashboards-2-fips-dashboards-visualizations","label":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-ml-commons-dashboards","name":"opensearch-dashboards-2-fips-ml-commons-dashboards","label":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-index-management-dashboards-plugin","name":"opensearch-dashboards-2-index-management-dashboards-plugin","label":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-ml-commons-dashboards","name":"opensearch-dashboards-2-ml-commons-dashboards","label":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.16.0-r0","eol":null,"hubHref":null},{"vendor":"Npm","product":"ag-grid-community","name":"ag-grid-community","label":"ag-grid-community","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/ag-grid-community","purlType":"npm","versions":[{"text":"≥ 32.0.0, < 32.0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 31.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 32.0.0, < 32.0.1 | < 31.3.4","eol":null,"hubHref":null},{"vendor":"Npm","product":"ag-grid-enterprise","name":"ag-grid-enterprise","label":"ag-grid-enterprise","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/ag-grid-enterprise","purlType":"npm","versions":[{"text":"≥ 32.0.0, < 32.0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 31.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 32.0.0, < 32.0.1 | < 31.3.4","eol":null,"hubHref":null},{"vendor":"@ag-grid-enterprise","product":"charts","name":"@ag-grid-enterprise/charts","label":"charts","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@ag-grid-enterprise/charts","purlType":"npm","versions":[{"text":"≥ 32.0.0, < 32.0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 31.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 32.0.0, < 32.0.1 | < 31.3.4","eol":null,"hubHref":null}],"affectedCount":35,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://gist.github.com/mestrtee/c1590660750744f25e86ba1bf240844b","label":"gist.github.com/mestrtee/c1590660750744f25e86ba1bf240844b","hostname":"gist.github.com","tags":["WEB","Exploit","Third Party Advisory"]},{"url":"https://gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b","label":"gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b","hostname":"gist.github.com","tags":["WEB","Exploit","Third Party Advisory"]},{"url":"https://gist.github.com/mestrtee/18e8c27f3a6376e7cf082cfe1ca766fa","label":"gist.github.com/mestrtee/18e8c27f3a6376e7cf082cfe1ca766fa","hostname":"gist.github.com","tags":["WEB","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39001","label":"nvd.nist.gov/vuln/detail/CVE-2024-39001","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/ag-grid/ag-grid/issues/8261","label":"github.com/ag-grid/ag-grid/issues/8261","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ag-grid/ag-grid/commit/78fb47f6c996f22c0b7184afb29620ab8c240522","label":"github.com/ag-grid/ag-grid/commit/78fb47f6c996f22c0b7184afb29620ab8c240522","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ag-grid/ag-grid/commit/ff731699453f2632d4852b3a3c34b479c406068c","label":"github.com/ag-grid/ag-grid/commit/ff731699453f2632d4852b3a3c34b479c406068c","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/ag-grid/ag-grid","label":"github.com/ag-grid/ag-grid","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://www.ag-grid.com/changelog/?fixVersion=31.3.4","label":"www.ag-grid.com/changelog/?fixVersion=31.3.4","hostname":"www.ag-grid.com","tags":["WEB"]},{"url":"https://www.ag-grid.com/changelog/?fixVersion=32.0.1","label":"www.ag-grid.com/changelog/?fixVersion=32.0.1","hostname":"www.ag-grid.com","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39001.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39001.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-3MPQ-GFFQ-CXPW","CGA-G756-5PJ8-3463","CGA-W4P5-9585-6F4G"]},"timeline":[{"kind":"published","date":"2024-07-01T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-02T04:19:20.486Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:53:56.456Z","stale":false,"partial":false}}