Skip to content
OpenAdvisories

Package · npm

xlsx

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2024-22363 Public exploit

    SheetJS Regular Expression Denial of Service (ReDoS)

    SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

    sqlpad xlsx Wolfi npm
  • High 7.8
    CVE-2023-30533 Public exploit

    Prototype Pollution in sheetJS

    SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

    xlsx npm
  • Medium 5.5
    CVE-2021-32014

    Denial of Service in SheetJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.

    xlsx org.webjars.npm:xlsx npm Maven
  • Medium 5.5
    CVE-2021-32013

    Denial of Service in SheetsJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).

    xlsx org.webjars.npm:xlsx npm Maven
  • Medium 5.5
    CVE-2021-32012

    Denial of Service in SheetJS Pro

    SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).

    xlsx org.webjars.npm:xlsx npm Maven