SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| xlsx(npm) | 0 | 0.17.0 | N/A |
| org.webjars.npm:xlsx(Maven) | 0 | 0.17.0 | N/A |
CVSS Metrics
