Prototype Pollution in sheetJS: toast-ui.grid using out of date version of xlsx

nhn / tui.grid

🍞🔡 The Powerful Component to Display and Edit Data. Experience the Ultimate Data Transformer!

http://ui.toast.com/tui-grid/

MIT License

2.41k stars 388 forks source link

Prototype Pollution in sheetJS: toast-ui.grid using out of date version of xlsx #1922

Open AnandDavis opened 1 year ago

AnandDavis commented 1 year ago

Describe the bug All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files (for example, exporting data to spreadsheet files) are unaffected.

Prototype Pollution in sheetJS](https://github.com/advisories/GHSA-4r6h-8v6p-xvw6)