Sheetjs vulnerabilities

2 known vulnerabilities affecting sheetjs/sheetjs.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-30533HIGHCVSS 7.8fixed in 0.19.32023-04-24

CVE-2023-30533 [HIGH] CWE-1321 CVE-2023-30533: SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other word SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

CVE-2021-32014MEDIUMCVSS 5.5≤ 0.16.92021-07-19

CVE-2021-32014 [MEDIUM] CWE-400 CVE-2021-32014: SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumptio SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.