CVE-2024-22363
SheetJS Regular Expression Denial of Service (ReDoS)
概要
SheetJS Regular Expression Denial of Service (ReDoS)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com/.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"}]}]
参照URL
- advisory nvd.nist.gov
- package git.sheetjs.com
- web cdn.sheetjs.com
- web cdn.sheetjs.com
- web cwe.mitre.org
- web git.sheetjs.com