TI-2023-14368 CVE-2023-30533 · GHSA-4r6h-8v6p-xvw6
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file.
Priority LOW 38
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file.
No Sheetjs vulnerabilities are listed in CISA KEV.
2 records
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file.
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.