{"action":"Upgrade ag-grid-enterprise to 31.3.4 or later.","affected":[{"fixed":"31.3.4","introduced":"0"}],"component":"ag-grid-enterprise","cve_ids":["CVE-2024-38996"],"ecosystem":"npm","epss":0.01158,"exploited":false,"fixed_versions":["31.3.4"],"ghsa_id":"GHSA-876p-c77m-x2hc","id":"tcs_01M5KFC2B7ZT2MXHT42TZ7NH04","modified_at":"2026-09-10T03:50:16.345864545Z","published_at":"2024-07-01T15:32:17Z","references":["https://osv.dev/vulnerability/GHSA-876p-c77m-x2hc","https://nvd.nist.gov/vuln/detail/CVE-2024-38996","https://github.com/ag-grid/ag-grid/pull/8290","https://gist.github.com/mestrtee/18e8c27f3a6376e7cf082cfe1ca766fa","https://gist.github.com/mestrtee/c1590660750744f25e86ba1bf240844b","https://gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b","https://github.com/ag-grid/ag-grid"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-876p-c77m-x2hc","url":"https://osv.dev/vulnerability/GHSA-876p-c77m-x2hc"}],"summary":"Prototype pollution in ag-grid-community via the _.mergeDeep function"}