89 matches found
CVE-2023-30533
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected...
CVE-2021-32014
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service CPU consumption via a crafted .xlsx document that is mishandled when read by xlsx.js...
CVE-2021-32012
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 1 of 2...
CVE-2021-32013
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service memory consumption via a crafted .xlsx document that is mishandled when read by xlsx.js issue 2 of 2...
SheetJS Regular Expression Denial of Service (ReDoS)
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS. A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com...
GHSA-5PGG-2G8V-P4X9 SheetJS Regular Expression Denial of Service (ReDoS)
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS. A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com...
CVE-2024-22363
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...
CVE-2024-22363
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...
SheetJS security vulnerabilities
SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.20.2 that stems from vulnerability to regular expression denial of service attacks...
CVE-2024-22363
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...
PT-2024-19365
Name of the Vulnerable Software and Affected Versions SheetJS Community Edition versions prior to 0.20.2 Description The issue is related to a Regular Expression Denial of Service ReDoS in the SheetJS Community Edition. It is estimated that over 2,000,000 devices are potentially affected due to t...
CVE-2024-22363: Inefficient Regular Expression Complexity
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...
CVE-2024-22363
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service ReDoS...
CVE-2024-22363
The SheetJS Community Edition (specifically the xlsx package) before version 0.20.2 is vulnerable to a Regular Expression Denial of Service (ReDoS) . This vulnerability is caused by a regular expression with inefficient complexity , which can be exploited using specially crafted inputs to cause e...
SheetJS Community Edition Prototype Pollution
The vulnerability of the SheetJS Community Edition NPM package is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack using a specially crafted xlsx file...
Exploit for Prototype Pollution in Sheetjs
POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per:...
Prototype Pollution in sheetJS
All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files for example, exporting data to spreadsheet files are unaffected. A non-vulnerable version cannot be found via npm, as the repository...
GHSA-4R6H-8V6P-XVW6 Prototype Pollution in sheetJS
All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files for example, exporting data to spreadsheet files are unaffected. A non-vulnerable version cannot be found via npm, as the repository...