search

protobi / js-xlsx

XLSX / XLSM / XLSB (Excel 2007+ Spreadsheet) / ODS parser and writer
http://oss.sheetjs.com/js-xlsx
Other
831 stars 416 forks source link

xlsx 0.15.0 Security Vulnerability #150

Open AlAyoub opened 4 years ago

AlAyoub commented 4 years ago

Hello,

I am receiving a security vulnerability coming from xlsx 0.15.0 in my scans from the following locations:

node_modules/xlsx-style/dist/jszip.js node_modules/xlsx-style/dist/ods.js node_modules/xlsx-style/dist/xlsx.core.min.js node_modules/xlsx-style/dist/xlsx.full.min.js node_modules/xlsx-style/dist/xlsx.js node_modules/xlsx-style/dist/xlsx.min.js node_modules/xlsx-style/jszip.js node_modules/xlsx-style/ods.js node_modules/xlsx-style/xlsx.js

I am showing that the following versions are secure:

Upgrade To: xlsx-0.16.0, xlsx-0.16.1 or xlsx-0.16.2

I believe this is being forked from SheetJS, is that right? I believe they put in a fix for this: https://github.com/SheetJS/sheetjs/commit/768e1bdcf8d1820bdb69b62252c4b53ab22b10f8

Is there any chance that this can be updated? Thank you.