Grist Core

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-24002 CRITICAL PATCH Act Now

Grist spreadsheet software has an injection vulnerability in Python formula execution that allows authenticated users to escape the formula sandbox and execute arbitrary code.

Python AI / ML Grist Core

NVD GitHub

CVSS 3.1

9.0

EPSS

0.0%

CVE-2025-64753 MEDIUM This Month

grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Grist Core

NVD GitHub

CVSS 3.1

5.3

EPSS

0.1%

CVE-2025-64752 MEDIUM This Month

grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

SSRF Grist Core

NVD GitHub

CVSS 3.1

6.8

EPSS

0.1%

CVE-2026-24002

EPSS 0% CVSS 9.0

CRITICAL PATCH Act Now

Grist spreadsheet software has an injection vulnerability in Python formula execution that allows authenticated users to escape the formula sandbox and execute arbitrary code.

Python AI / ML Grist Core

NVD GitHub

CVE-2025-64753

EPSS 0% CVSS 5.3

MEDIUM This Month

grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Grist Core

NVD GitHub

CVE-2025-64752

EPSS 0% CVSS 6.8

MEDIUM This Month

grist-core is a spreadsheet hosting server. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

SSRF Grist Core

NVD GitHub