2 matches found
CVE-2021-32012
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...
5.5CVSS7.3AI score0.0088EPSS
SaveExploits0References4
Denial of Service (DoS)
Overview xlsx is a Parser and writer for various spreadsheet formats. Affected versions of this package are vulnerable to Denial of Service DoS. An attacker who can send a malicious excel file parsed by this library can cause maximum CPU usage. Note: xlsx package after version 0.18.5 is distribut...
7.5CVSS9.2AI score0.0088EPSS
SaveExploits0References2
20