GrapesJS version [x] I confirm to use the latest version of GrapesJS What browser are you using? Edge, mozilla Reproducible demo link NA Describe the bug underscore <=1.13.7 Severity: high underscore <=1.13.7 Severity: high Underscore has unlimited recursion in .flatten and .isEqual, potential for DoS attack - https:/...
artf
Thanks for the report @tiburciomzt The bump was merged and will soon be released.
GJS Helper
The issue you've reported regarding the underscore vulnerability (GHSA-qpx9-hpmf-5gmw) in grapesjs is valid and concerns a high-severity DoS vulnerability in underscore versions prior to 1.13.8. This vulnerability affects .flatten and .isE...
GrapesJS version 0.22.14 (latest release as of 2025-11-20) What's the expected behavior? No deprecated dependencies in the GrapesJS install tree (or guidance/roadmap on replacing them). What's the current behavior? Installing [email protected] emits an npm/pnpm deprecation warning because it depends on backbone-undo@0....
GJS Helper
The deprecation warning for [email protected] when installing GrapesJS is a valid concern regarding dependency maintenance. Let's break down the situation and what it means for GrapesJS users. Root Cause: Deprecated Dependency GrapesJS c...
GrapesJS version [x] I confirm to use the latest version of GrapesJS What browser are you using? Version 138.0.7204.50 (Official Build) (arm64) Reproducible demo link https://jsfiddle.net/artur_arseniev/L24hkgm5/ Describe the bug How to reproduce the bug? add layers manager and use "grapesjs": "0.22.8" or "0.22.9" dep...
GJS Helper
You've accurately identified a regression in GrapesJS versions 0.22.8 and 0.22.9 where the Layer Manager's visibility toggle from 'invisible' to 'visible' was not functioning correctly. The 'visible' to 'invisible' toggle worked as expecte...
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? Firefox 131.0.2 Reproducible demo link https://grapesjs.com/demo-newsletter-editor.html Describe the bug How to reproduce the bug?Go to the grapesjs demo, then import the following html:Open your browser console.Rapidly cl...
artf
Hey @jlafosse thanks for the report. I'd not expect that issue with the latest version: <img width="123" alt="Screenshot 2024-10-21 at 19 00 04" src="https://github.com/user-attachments/assets/ff074a31-cd19-4547-bb27-596c92e16d64"> Can you...
jlafosse
Indeed, that appears to have fixed the issue! Thank you!
GrapesJS version[X] I confirm to use the latest version of GrapesJSWhat browser are you using? Firefox 126.0.1Reproducible demo link https://grapesjs.com/demo.htmlDescribe the bug How to reproduce the bug?Open your firefox browser and go to the demo link What is the expected behavior? The editor should show a white sc...
nhan-nguyen-se
@MarceloBD How did you manage to solve this? I'm facing the same issue.
GJS Helper
It appears you've encountered an intermittent bug in GrapesJS, specifically affecting its loading and the layers panel in Firefox. The TypeError: model is undefined when clicking the layers menu is a critical clue pointing to a race condit...
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? Chrome v122 Reproducible demo link N/A Describe the bug How to reproduce the bug?Checkout git onto a Windows 10+ machineBuild using provided procedure. What is the expected behavior? It should build the same as in a *inx s...
bernesto
Yeah, I did all the usual stuff. Lock files, updates, various ways of imports ({}, require, *, full path, etc.) Not sure why, but when I break stuff, I break it good. Always tier 2 or 3 support LMAO. I do believe the issue resides in CLI,...
bernesto
Good points. I have not tried the other versions of Node. I will give that a shot.
artf
Yeah build/serve are managed by the CLI (let's move the issue there) but I'm not sure what might be the problem (no Windows to test ๐ฅฒ)
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? ---- Reproducible demo link https://codesandbox.io/p/sandbox/pensive-browser-mfhxp8 Describe the bug How to reproduce the bug?Create Angular ProjectAdd grapeJS dependencyinclude "allowSyntheticDefaultImports": true on tsco...
marktamis
I copied over some of the settings of the tsconfig from a working vite gjs project into my stenciljs project and now it is running correctly. I think you need to do some tweaking to your angular tsconfig and it should not throw the error a...
Deepakanandrao
"skipLibCheck": true, did the trick. Thank you @marktamis ๐
artf
Yeah "skipLibCheck": true is necessary here until I find the fix for that TS output ๐
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? all and none, the bug is during the build Reproducible demo link unnecessary Describe the bug How to reproduce the bug? Use NPM to install GrapesJS to use it in a typescript project. According to the documentation, to set...
artf
This seems to be related to https://github.com/microsoft/TypeScript/issues/35945 As a workaround you could do something like this for now: I guess for the TS type safety we would need to introduce some kind of helper for plugins
jchautreux
that sounds to be a good idea
artf
Added the helper here (I'll also update the docs with the usage later)
GrapesJS version [X] I confirm to use the latest version of GrapesJS What browser are you using? Firefox 109 Reproducible demo link none Describe the bug How to reproduce the bug? What is the expected behavior? The development server starts. What is the current behavior? I'm using node v16.18.1 (MacOS) although had th...
mnutt
Yes, I'm able to reproduce it on grapesjs-style-filter too, same types of errors.
mnutt
I was able to circumvent this error by changing the build pipeline to output more modern javascript (via --targets="> 3%"), though that produces backbone errors due to the use of es6 classes.
artf
I'm not able to reproduce on my side with a fresh install, are you using the dev branch?
GrapesJS version[X] I confirm to use the latest version of GrapesJSWhat browser are you using? chrome 106Reproducible demo link localhostDescribe the bug i updated my project containing grapesjs, however now i get this error: when i run my project, i get this error: this is what top 2 lines of module.js has: I have tr...
artf
You shouldn't try to compile grapesjs source code as the source could contain bundler-related content (as the one you mention, it's not an external package)
nabtron
@artf you shouldn't try to close tickets without reading them first. If you will read the issue, you will see that i mentioned when i "updated" it, i updated it using npm i by changing grapesjs version in package.json to latest version. Th...
artf
Yeah I understand that you have simply updated the version but it looks like you're trying to read the source of the grapesjs package, which is wrong (probably in the future, the src folder will be even removed)