CVE-2021-32014
Denial of Service in SheetJS Pro
Résumé
Denial of Service in SheetJS Pro
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Maven
org.webjars.npm:xlsx
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}]
Références
- advisory nvd.nist.gov
- web floqast.com
- web sheetjs.com
- web npmjs.com
- web oracle.com