CVE-2024-22363
SheetJS Regular Expression Denial of Service (ReDoS)
Résumé
SheetJS Regular Expression Denial of Service (ReDoS)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com/.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
xlsx
[{"type":"SEMVER","events":[{"introduced":"0"}]}]
Références
- advisory nvd.nist.gov
- package git.sheetjs.com
- web cdn.sheetjs.com
- web cdn.sheetjs.com
- web cwe.mitre.org
- web git.sheetjs.com