Denial of Service in SheetJS Pro

2021-07-2219:48:17

Google

osv.dev

0.001 Low

EPSS

Percentile

28.7%

JSON

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).

CPENameOperatorVersion
org.webjars.npm:xlsxeq0.9.13
org.webjars.npm:xlsxeq0.12.5
org.webjars.npm:xlsxeq0.16.9
xlsxlt0.17.0
org.webjars.npm:xlsxeq0.15.3
org.webjars.npm:xlsxeq0.14.3
org.webjars.npm:xlsxeq0.14.0
org.webjars.npm:xlsxeq0.15.6
org.webjars.npm:xlsxeq0.16.8
org.webjars.npm:xlsxeq0.15.2

Name	Operator	Version
org.webjars.npm:xlsx	eq	0.9.13
org.webjars.npm:xlsx	eq	0.12.5
org.webjars.npm:xlsx	eq	0.16.9
xlsx	lt	0.17.0
org.webjars.npm:xlsx	eq	0.15.3
org.webjars.npm:xlsx	eq	0.14.3
org.webjars.npm:xlsx	eq	0.14.0
org.webjars.npm:xlsx	eq	0.15.6
org.webjars.npm:xlsx	eq	0.16.8
org.webjars.npm:xlsx	eq	0.15.2