| Package | Affected versions | Patched versions |
|---|---|---|
| xlsx | all versions |
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free