59 matches found
GHSA-4R6H-8V6P-XVW6 Prototype Pollution in sheetJS
All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files for example, exporting data to spreadsheet files are unaffected. A non-vulnerable version cannot be found via npm, as the repository...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
SheetJS 安全漏洞
SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.19.3, which stems from a vulnerability that allows an attacker to prototype contamination by crafting files...
CVE-2023-30533
SheetJS Community Edition versions up to 0.19.2 are affected by a Prototype Pollution vulnerability triggered by crafted files; 0.19.3 and later are fixed. A POC exploit exists on GitHub for CVE-2023-30533. Affected component: SheetJS CE parser/reader behavior enabling pollution via crafted input...
PT-2023-4424 · Unknown · Sheetjs Community Edition
Name of the Vulnerable Software and Affected Versions: SheetJS Community Edition versions prior to 0.19.3 Description: The issue is related to a Prototype Pollution vulnerability, which can be exploited by a remote attacker using a specially crafted file, potentially allowing for unauthorized...
The vulnerability of the SheetJS and SheetJS Pro software, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the SheetJS and SheetJS Pro software lies in their uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially crafted xlsx file that is incorrectly processed...
Denial of Service
Overview SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js. Recommendation Upgrade to version 0.17.0 or later References - GitHub Advisory - CVE...
Denial of Service in SheetJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...
GHSA-3X9F-74H4-2FQR Denial of Service in SheetJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...
Denial of Service in SheetsJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...
GHSA-8VCR-VXM8-293M Denial of Service in SheetsJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...
Denial of Service in SheetJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...
GHSA-G973-978J-2C3P Denial of Service in SheetJS Pro
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...
Denial Of Service
xlsx of sheetjs is vulnerable to denial of service. The vulnerability exists due to an XLS Xnum Buffer underflow. An attacker is able to crash the system by uploading a malicious crafted xlsx document...
SheetJS Pro has an unspecified vulnerability
SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...
CVE-2021-32013
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...
CVE-2021-32014
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...
CVE-2021-32012
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...