@xhubio/table-export-spreadsheet-decision (>=1.1.6, <=1.1.8), nodejs-lib (>=2.3.0, <=2.3.5) potentially affected by CVE-2018-16459 via exceljs (>=1.0.0, <=1.5.1)

exceljs NPM version =1.0.0, =1.1.6, =2.3.0, =2.3.5 Source cves: CVE-2018-16459 Source advisory: OSV:GHSA-2J2J-8RRV-264G...

CVE-2018-16459

An unescaped payload in exceljs v1.6 allows a possible XSS via cell value when worksheet is displayed in browser...

CVE-2018-16459

Summary: CVE-2018-16459 relates to the exceljs library. Affected software: exceljs prior to 1.6.0. Vulnerability: unescaped payload in cell values leads to cross-site scripting (XSS) when a worksheet is rendered in a browser, because parsed XLSX data is not validated and HTML tags (e.g., [removed...