grandnode2 vulnerabilities
CVEs whose affected-version data names the grandnode2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112249Low· 2.4grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting
A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation r…
▾ Sunlitgrandnode · grandnode2via CVEORG
CVE-2026-112248Medium· 4.7grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal
A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Pi…
▾ Sunlitgrandnode · grandnode2via CVEORG