CVE-2024-22363
SheetJS Regular Expression Denial of Service (ReDoS)
Summary
SheetJS Regular Expression Denial of Service (ReDoS)
Original description
The description as published by the source.
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com/.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"}]}]
References
- advisory nvd.nist.gov
- package git.sheetjs.com
- web cdn.sheetjs.com
- web cdn.sheetjs.com
- web cwe.mitre.org
- web git.sheetjs.com