Description
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.webjars.npm:xlsx | < 0.17.0 | 0.17.0 | GHSA-g973-978j-2c3p |
| npm | xlsx | < 0.17.0 | 0.17.0 | GHSA-g973-978j-2c3p |
Advisories 1
- WID-SEC-2022-2368 HCL BigFix: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 9, 2023