GHSA-5pgg-2g8v-p4x9HighCVSS 7.5

SheetJS Regular Expression Denial of Service (ReDoS)

Published
April 5, 2024
Last Modified
September 19, 2025

🔗 CVE IDs covered (1)

CVE-2024-22363 →

📋 Description

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

A non-vulnerable version cannot be found via npm, as the repository hosted on GitHub and the npm package xlsx are no longer maintained. Version 0.20.2 can be downloaded via https://cdn.sheetjs.com/.

🎯 Affected products1

  • npm/xlsx:< 0.20.2

🔗 References (6)