CVE-2026-42142

TypeBot is a chatbot builder tool. Prior to version 3.17.0, the "handleGetSheets" API handler "POST /api/sheets/getSheets" does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet dat...

SheetJS Pro has an unspecified vulnerability

SheetJS Pro is open source a spreadsheet data parser and writer. Create beautiful reports. Faster import and export. Preview grids, images, and PDFs. A security vulnerability exists in SheetJS Pro version 0.16.9 and earlier, which can be exploited by attackers to cause a denial of service memory...