Grid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-42199 · Microsoft / collected KEV context

EUVD-2026-28834

GHSA-38c5-483c-4qqp

cve-program · CVE-2026-42199

• https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp
• https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072
• https://github.com/becheran/grid/releases/tag/v1.0.1

euvd · EUVD-2026-28834

• https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp
• https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072
• https://github.com/becheran/grid/releases/tag/v1.0.1

nvd · CVE-2026-42199

• https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072
• https://github.com/becheran/grid/releases/tag/v1.0.1
• https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp

osv · GHSA-38c5-483c-4qqp

• https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp
• https://nvd.nist.gov/vuln/detail/CVE-2026-42199
• https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072
• https://github.com/becheran/grid
• https://github.com/becheran/grid/releases/tag/v1.0.1

No related operational record is retained in the current change model.