Description
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.webjars.npm:xlsx | < 0.17.0 | 0.17.0 | GHSA-8vcr-vxm8-293m |
| npm | xlsx | < 0.17.0 | 0.17.0 | GHSA-8vcr-vxm8-293m |
Advisories 1
- WID-SEC-2022-2368 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 9, 2023