xlsx

SheetJS SheetJS Community Edition은 거의 모든 복잡한 스프레드시트에서 유용한 데이터를 추출하고, 레거시 및 최신 소프트웨어 모두에서 작동하는 새 스프레드시트를 생성하기 위한 실전 검증된 오픈소스 솔루션을 제공합니다. SheetJS Pro는 데이터 처리 그 이상의 솔루션을 제공합니다: 복잡한 템플릿을 쉽게 편집하고, 스타일링으로 내면의 피카소를 꺼내며, 이미지/그래프/피벗 테이블이 있는 사용자 지정 시트를 만들고, 수식 표현식을 평가하고 계산을 웹 앱으로 포팅하며, 일반적인 스프레드시트 작업을 자동화하...

CVE-2023-30533

POC - CVE-2023-30533 CVE-2023-30533에 대한 POC 다음에서 복사: https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: SheetJS Community Edition의 모든 릴리스버전 0.19.2까지가 영향을 받습니다. 여기에는 다음이 포함됩니다: root@kitploit: - 버전 0.19.2까지의 SheetJS CDN에 있는 스크립트 및 모듈 2 - npmjs.com에 xlsx 이름으로 게시된 모듈 3 - npmjs.com의 xls...

EUVD-2021-1466

Malware in sbrugna...

EUVD-2021-1438

Malware in sbrugna...

EUVD-2021-1453

Malware in sbrugna...

EUVD-2023-1194

Malicious code in bioql PyPI...

CVE-2024-22363

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...

CVE-2023-30533

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

SheetJS Regular Expression Denial of Service (ReDoS)

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS. A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com...

GHSA-5PGG-2G8V-P4X9 SheetJS Regular Expression Denial of Service (ReDoS)

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS. A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com...

CVE-2024-22363

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...

CVE-2024-22363

SheetJS Community Edition before 0.20.2 is vulnerable to Regular Expression Denial of Service (ReDoS) caused by an inefficient regular expression. Impact is resource exhaustion (high) as stated in the CVE entry with CVSSv3.1: 7.5 (Network attack, no user interaction, all else unchanged; availabil...

PT-2024-19365 · Unknown · Sheetjs Community Edition

Name of the Vulnerable Software and Affected Versions: SheetJS Community Edition versions prior to 0.20.2 Description: The issue is related to a Regular Expression Denial of Service ReDoS in the SheetJS Community Edition. It is estimated that over 2,000,000 devices are potentially affected due to...

CVE-2024-22363

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...

SheetJS 安全漏洞

SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.20.2 that stems from vulnerability to regular expression denial of service attacks...

CVE-2024-22363

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...

The vulnerability of the NPM package SheetJS Community Edition lies in the uncontrolled modification of prototype attributes, allowing an attacker to execute a “prototype pollution” attack.

The vulnerability of the SheetJS Community Edition NPM package is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack using a specially crafted xlsx file...