CVE-2021-32013
Fixed upstream EPSS <1%
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Products: sheetjs_project sheetjs, sheetjs_project sheetjs_pro, oracle rest_data_services
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.webjars.npm:xlsx | 0.17.0 |
| npm | xlsx | 0.17.0 |