Description
All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | x-data-spreadsheet | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | x-data-spreadsheet | <= 1.1.9 | — | GHSA-x5cw-843f-r366 |