MEDIUM5.5
GHSA-8vcr-vxm8-293m
Denial of Service in SheetsJS Pro
Quick fix
GHSA-8vcr-vxm8-293m — xlsx: upgrade to the fixed version with the command below.
npm install xlsx@0.17.0Details
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/org.webjars.npm:xlsx
Introduced in:
0Fixed in: 0.17.0Fix
# pom.xml: bump <version>0.17.0</version> for org.webjars.npm:xlsx