Please publish new version to npm - ReDoS fix

mgcrea / node-xlsx

NodeJS excel file parser & builder

Other

2.96k stars 274 forks source link

Closed marko-jankovic closed 3 years ago

marko-jankovic commented 3 years ago

Hi!

Latest version 0.15 is using xlsx version 0.14.1 that is vulnerable to ReDoS attacks. https://snyk.io/vuln/SNYK-JS-XLSX-585898

I see you already have fix on master. Could you please publish to npm?

Thank you!

mgcrea commented 3 years ago

Done! v0.16.0

marko-jankovic commented 3 years ago

v0.16 requires babel

Cannot find module '@babel/runtime/helpers/interopRequireDefault'

marko-jankovic commented 3 years ago

thank you for quick fix 💪