Threats affecting pkg:npm/wongcyrus/excellexbot

CVE-2026-19360 is a medium severity vulnerability in wongcyrus ExcelLexBot versions 0.0.1, 0.0.2, and 0.0.3 affecting the Lambda Function Handler component. It involves improper privilege management in the ExcelLexBotS3TriggerFunction, which can be exploited remotely. The product is no longer supported by the maintainer, and the vendor did not respond to disclosure attempts. The service is cloud-hosted, and a patch is indicated as available.