Threats tagged 'ghsa-xch6-rmr7-fh84'

A denial of service vulnerability exists in exceljs through version 4.4.0. Attackers can craft XLSX files with row numbers far beyond Excel's normal limits, causing functions like getSheetValues(), workbook writes, and CSV exports to consume excessive processing time and block the event loop.