Vulnerabilities (CVE)

Filtered by vendor Sheetjs Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-30533 1 Sheetjs 1 Sheetjs 2023-12-10 N/A 7.8 HIGH
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.
CVE-2021-32014 2 Oracle, Sheetjs 3 Rest Data Services, Sheetjs, Sheetjs Pro 2023-12-10 4.3 MEDIUM 5.5 MEDIUM
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.