handsontable@0.23.0 vulnerabilities

Handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

Direct Vulnerabilities

Known vulnerabilities in the handsontable package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Regular Expression Denial of Service (ReDoS)

handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade handsontable to version 10.0.0 or higher.

>=0.23.0 <10.0.0
  • M
Cross-site Scripting (XSS)

handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It is possible to insert malicious JavaScript code using Handsontable built-in functionalities.

How to fix Cross-site Scripting (XSS)?

Upgrade handsontable to version 8.2.0 or higher.

>=0.23.0 <8.2.0