Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2023-30533

Disclosure Date: April 24, 2023 (last updated October 08, 2023)
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.
Attacker Value
Unknown

CVE-2021-32013

Disclosure Date: July 19, 2021 (last updated February 23, 2025)
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Attacker Value
Unknown

CVE-2021-32012

Disclosure Date: July 19, 2021 (last updated February 23, 2025)
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
Attacker Value
Unknown

CVE-2021-32014

Disclosure Date: July 19, 2021 (last updated February 23, 2025)
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.