Threats tagged 'ghsa-qwf5-f797-39mm'

ExcelJS versions through 4.4.0 have a denial of service vulnerability where an attacker can supply an unbounded sheetId in the xl/workbook.xml file. This causes the event loop to be blocked for seconds during operations like walking worksheets, getWorksheet, and writeBuffer.