The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.02958·Published 2021-09-29·Fixed in 10.0.0CWE-1333