Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Dependency: Update xlsx version to resolve high security vulnerability
https://cdn.sheetjs.com/advisories/CVE-2024-22363 Summary All versions of SheetJS CE through 0.20.1 are vulnerable to "Regular Expression Denial of Service" (ReDoS). For more details, see https://regexide.com Categorization CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (Score 7.5 - High) CWE-1333 Inefficient Regular Expression Complexity [1] Remediation Users should upgrade to version 0.20.2 or later. Official releases are available on the SheetJS CDN [2]. SheetJS CE documentation includes installation instructions for common deployments [7].
- Loading branch information