9 matches found
ROOT-APP-NPM-CVE-2023-30533 CVE-2023-30533 in @rootio/xlsx - Patched by Root
Root has patched CVE-2023-30533 in the @rootio/xlsx package for Root:npm. Multiple fixed versions available...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
Exploit for Prototype Pollution in Sheetjs
POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per:...
003-gas-convert (1.0.1), 0510test (1.0.0) +9139 more potentially affected by CVE-2023-30533 via xlsx (>=0.3.10, <=0.18.5)
xlsx NPM version =0.3.10, =1.3.0, =1.2.7, =1.0.1, =0.1.0, =0.1.0, =1.0.0, =1.0.46 and more Source cves: CVE-2023-30533 Source advisory: OSV:GHSA-4R6H-8V6P-XVW6...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2023-30533
SheetJS Community Edition versions up to 0.19.2 are affected by a Prototype Pollution vulnerability triggered by crafted files; 0.19.3 and later are fixed. A POC exploit exists on GitHub for CVE-2023-30533. Affected component: SheetJS CE parser/reader behavior enabling pollution via crafted input...
