CVE-2021-32012
Denial of Service in SheetJS Pro
Summary
Denial of Service in SheetJS Pro
Original description
The description as published by the source.
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Maven
org.webjars.npm:xlsx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
References
- advisory nvd.nist.gov
- web floqast.com
- web sheetjs.com
- web npmjs.com
- web oracle.com