GHSA-3x9f-74h4-2fqr

Source
https://github.com/advisories/GHSA-3x9f-74h4-2fqr
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/07/GHSA-3x9f-74h4-2fqr/GHSA-3x9f-74h4-2fqr.json
Aliases
  • CVE-2021-32012
Published
2021-07-22T19:48:17Z
Modified
2024-02-17T05:21:26.590350Z
Details

SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).

References

Affected packages

npm / xlsx

Package

Name
xlsx

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.17.0

Maven / org.webjars.npm:xlsx

Package

Name
org.webjars.npm:xlsx

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.17.0

Affected versions

0.*

0.8.0
0.9.13
0.12.5
0.12.11
0.12.13
0.14.0
0.14.1
0.14.3
0.14.5
0.15.1
0.15.2
0.15.3
0.15.4
0.15.5
0.15.6
0.16.6
0.16.7
0.16.8
0.16.9