CVE-2021-32013
Denial of Service in SheetsJS Pro
概要
Denial of Service in SheetsJS Pro
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Maven
org.webjars.npm:xlsx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
参照URL
- advisory nvd.nist.gov
- web floqast.com
- web sheetjs.com
- web npmjs.com
- web oracle.com