xlsx vulnerabilities

SheetJS Spreadsheet data parser and writer

Registry
npm
Latest
0.18.5
License
Apache-2.0
Source
github.com/SheetJS/sheetjs (opens the source repository in a new tab)

5 known advisories

The latest version, 0.18.5, is affected by 2 of them.

Security advisories for xlsx

  • HighGHSA-5pgg-2g8v-p4x95 Apr 2024

    SheetJS Regular Expression Denial of Service (ReDoS)

    Affected
    All versions
    Fixed in
    No fix released
  • HighGHSA-4r6h-8v6p-xvw624 Apr 2023

    Prototype Pollution in sheetJS

    Affected
    All versions
    Fixed in
    No fix released
  • MediumGHSA-3x9f-74h4-2fqr22 Jul 2021

    Denial of Service in SheetJS Pro

    Affected
    <0.17.0
    Fixed in
    0.17.0
  • MediumGHSA-8vcr-vxm8-293m22 Jul 2021

    Denial of Service in SheetsJS Pro

    Affected
    <0.17.0
    Fixed in
    0.17.0
  • MediumGHSA-g973-978j-2c3p22 Jul 2021

    Denial of Service in SheetJS Pro

    Affected
    <0.17.0
    Fixed in
    0.17.0

Which of your client projects still run an old xlsx?

NPMscan reads the package-lock.json, yarn.lock and pnpm-lock.yaml in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.

Scan a project free, no signupOr connect GitHub to scan every repo

Other npm packages

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the npm registry.