Approved changes feed: RSS · Atom

cpe:2.3:a:sheetjs:sheetjs:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorSheetjs (ff0b1467-d90a-5584-bd83-1f9988deee9a)
ProductSheetjs (eea3411b-8d5e-5b61-8105-b13a3be86fad)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30533 vulnerable 2026-06-08 06:04:39.726016 Details available
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.
Published: 2023-04-24T00:00:00.000Z
Updated: 2025-02-04T19:42:49.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32014 vulnerable 2026-06-08 05:31:54.603955 Details available
SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.
Published: 2021-07-19T13:20:12.000Z
Updated: 2024-08-03T23:17:27.969Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.