CVE-2021-32013
Denial of Service in SheetsJS Pro
Résumé
Denial of Service in SheetsJS Pro
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Maven
org.webjars.npm:xlsx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Références
- advisory nvd.nist.gov
- web floqast.com
- web sheetjs.com
- web npmjs.com
- web oracle.com