| Package | Affected versions | Patched versions |
|---|---|---|
| org.webjars.npm:xlsx | < 0.17.0 | 0.17.0 |
| rest data services | < 21.2.4 | 21.2.4 |
| sheetjs | ≤ 0.16.9 | |
| sheetjs pro | ≤ 0.16.9 | |
| xlsx | < 0.17.0 | 0.17.0 |
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free