SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
Weakness
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Potential Mitigations
Related Attack Patterns
References
- https://cdn.sheetjs.com/advisories/CVE-2024-22363
- https://cwe.mitre.org/data/definitions/1333.html
- https://git.sheetjs.com/sheetjs/sheetjs/src/tag/v0.20.2
- https://cdn.sheetjs.com/advisories/CVE-2024-22363
- https://cwe.mitre.org/data/definitions/1333.html
- https://git.sheetjs.com/sheetjs/sheetjs/src/tag/v0.20.2