SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
CVSS 3.1MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.0088·Published 2021-07-19·Fixed in 0.17.0CWE-400
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
CVSS 3.1MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.0088·Published 2021-07-19·Fixed in 0.17.0CWE-400