CVE-2023-30533
No fix known EPSS <1%CVSS 7.8
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.
Products: sheetjs
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| npm | xlsx |