Spectra Assure
Community
Docs
failRisk: Vulnerabilities
Scanned: 16 days ago

ag-grid-enterprise

Advanced Data Grid / Data Table supporting Javascript / Typescript / React / Angular / Vue
License: unknown
Published: over 1 year ago



SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
1 severe vulnerabilities exploited
Hardening
No application hardening issues

Threats

Tampering
No evidence of software tampering
Malware
No evidence of malware inclusion

Popularity

70.76M
Recorded Downloads Since 2021
Contributors
Declared Dependencies
502
Dependents

Top issues

Problem

Software composition analysis has identified a component with one or more known severe vulnerabilities. Available threat intelligence telemetry has confirmed that the reported high or critical severity vulnerabilities are actively being exploited by malicious actors.

Prevalence in npm community

34 packages
found in
Top 100
152 packages
found in
Top 1k
1955 packages
found in
Top 10k
777714 packages
in community

Next steps

We strongly advise updating the component to the latest version.
If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Problem

Software composition analysis has identified a component with one or more known vulnerabilities. Based on the CVSS scoring, these vulnerabilities have been marked as critical severity.

Prevalence in npm community

9 packages
found in
Top 100
76 packages
found in
Top 1k
1295 packages
found in
Top 10k
447752 packages
in community

Next steps

Perform impact analysis for the reported CVEs.
We strongly advise updating the component to the latest version.
If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Problem

Software composition analysis has identified a component with one or more known vulnerabilities. Based on the CVSS scoring, these vulnerabilities have been marked as medium severity.

Prevalence in npm community

21 packages
found in
Top 100
132 packages
found in
Top 1k
2542 packages
found in
Top 10k
965123 packages
in community

Next steps

Perform impact analysis for the reported CVEs.
Update the component to the latest version.
If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Problem

Uniform Resource Locators (URLs) are structured addresses that point to locations and assets on the internet. URLs allow software developers to build complex applications that exchange data with servers that can be hosted in multiple geographical regions. URLs can commonly be found embedded in documentation, configuration files, source code and compiled binaries. Paste-and-share services are websites that allow their users to easily share code snippets and simple plain text documents. Users typically do not need to be registered on the website to publish and access shared information. For this reason, paste-and-share services are commonly used by malicious actors to deliver stages of their malware payloads. Many software supply chain attacks in the open source space leverage paste-and-share services to deliver malicious payloads. Presence of paste-and-share service references does not imply malicious intent. Software developers commonly include links to such services as documentation for various issues they encounter while writing and maintaining code bases.

Prevalence in npm community

2 packages
found in
Top 100
5 packages
found in
Top 1k
189 packages
found in
Top 10k
46346 packages
in community

Next steps

Investigate reported detections.
If the software should not include these network references, investigate your build and release environment for software supply chain compromise.
You should delay the software release until the investigation is completed, or until the issue is risk accepted.
Consider removing all references to flagged network locations.

Top behaviors

Prevalence in npm community

Behavior often found in this community (Common)
21 packages
found in
Top 100
136 packages
found in
Top 1k
1248 packages
found in
Top 10k
390529 packages
in community

Prevalence in npm community

Behavior often found in this community (Common)
7 packages
found in
Top 100
61 packages
found in
Top 1k
956 packages
found in
Top 10k
319930 packages
in community

Prevalence in npm community

Behavior often found in this community (Common)
6 packages
found in
Top 100
44 packages
found in
Top 1k
657 packages
found in
Top 10k
175209 packages
in community

Prevalence in npm community

Behavior often found in this community (Common)
5 packages
found in
Top 100
39 packages
found in
Top 1k
518 packages
found in
Top 10k
107169 packages
in community

Prevalence in npm community

Behavior often found in this community (Common)
15 packages
found in
Top 100
90 packages
found in
Top 1k
1202 packages
found in
Top 10k
290629 packages
in community

Top vulnerabilities

Vulnerability Exploitation Lifecycle
(2 Active Vulnerabilities)
None
2 (2 Fixable)
CVE-2024-38996c
CVE-2024-39001m
None
None
Exploits Unknown
Exploits Exist
Exploited by Malware
Patching Mandated