Threats tagged 'ghsa-4q98-w56f-7qh8'

ExcelJS versions through 4.4.0 have a regular expression denial of service (ReDoS) vulnerability in the slideFormula function within lib/utils/shared-formula.js. This occurs when processing shared formulas in spreadsheets, where crafted inputs with very long master formulas can cause excessive regex backtracking, blocking the Node.js event loop and causing a denial of service.