Threats tagged 'ghsa-6p4m-pmw8-v6w9'

ExcelJS versions through 4.4.0 have a memory exhaustion vulnerability that allows attackers to crash applications by providing a worksheet column element with an unbounded max attribute. This causes the xlsx.load() function to allocate an excessive number of Column objects, leading to an uncatchable heap out-of-memory error and process termination.