Skip to main content
cve.nowby Sazabi
← npm
npmPackage

xlsx

5 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high
Registry
npm

Advisories 5

  • SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

    Affected: all versions.

  • SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file.

    Affected: all versions.

  • SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that…

    Affected: fixed in 0.17.0.

  • SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document…

    Affected: fixed in 0.17.0.

  • SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document…

    Affected: fixed in 0.17.0.