CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

Crlf injection

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

Design/Logic Flaw

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

Design/Logic Flaw

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

CVE-2021-32014

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...

CVE-2021-32014

SheetJS Pro up to version 0.16.9 is affected: reading a crafted .xlsx with xlsx.js can cause a denial of service via CPU consumption. The issue is documented across multiple sources (NVD, Red Hat, npm advisory, OSV) and is mitigated by upgrading to 0.17.0 or later. Affected product: SheetJS (and ...

CVE-2021-32013

Affected software: SheetJS and SheetJS Pro up to version 0.16.9. Issue: memory consumption denial of service when reading a crafted .xlsx file via xlsx.js (issue 2 of 2). Impact: DoS due to parsing/memory handling. Remediation: upgrade to SheetJS/xlsx 0.17.0 or higher. Public references in connec...

CVE-2021-32013

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...

CVE-2021-32012

SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...

CVE-2021-32012

CVE-2021-32012 affects SheetJS and SheetJS Pro up to version 0.16.9. A crafted .xlsx document read by xlsx.js can cause a denial of service via memory consumption (issue 1 of 2). Exploitation details are described in the connected documents; the attack targets the XSLX reader logic. Mitigation: u...

SheetJS Pro 资源管理错误漏洞

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...

SheetJS Pro 资源管理错误漏洞

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports . Faster import and export. Preview grids, images and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and prior versions, which can be exploited by an attacker to cause a denial of servic...

SheetJS Pro 资源管理错误漏洞

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports . Faster import and export. Preview grids, images and PDFs. A security vulnerability exists in SheetJS Pro 0.16.9 and earlier versions, where an attacker can cause a denial of service via a crafted .xlsx...

Denial of Service (DoS)

Overview xlsx is a Parser and writer for various spreadsheet formats. Affected versions of this package are vulnerable to Denial of Service DoS. An attacker who can send a malicious excel file parsed by this library can cause maximum CPU usage. Note: xlsx package after version 0.18.5 is distribut...

1-click-bom (>=1.3.0 <=1.3.1), 25uikit (>=1.2.7 <=1.2.10) +2742 more potentially affected by CVE-2021-32012 via xlsx (>=0.10.3 <=0.16.9)

xlsx NPM version =0.10.3, =1.3.0, =1.2.7, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook =0.0.1 - @abcum/ember-sheetjs =0.1.0 and more Source cves: CVE-2021-32012 Source advisory: SNYK:JS-XLSX-1311141...

Denial of Service (DoS)

Overview xlsx is a Parser and writer for various spreadsheet formats. Affected versions of this package are vulnerable to Denial of Service DoS. An attacker who can send a malicious excel file parsed by this library can crash the Node.JS process. Note: xlsx package after version 0.18.5 is...

Regular Expression Denial Of Service (ReDoS)

sheetjs is vulnerable to regular expression denial of service ReDoS. The vulnerability exists due to the usage of vulnerable regular expressions for xlmlregex in the function xlmlnormalize...