CVE-2021-32014
Fixed upstream EPSS <1%
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.
Products: sheetjs, sheetjs_pro, oracle rest_data_services
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.webjars.npm:xlsx | 0.17.0 |
| npm | xlsx | 0.17.0 |