Advisories · Technology
exceljs.
Every CVE that names exceljs among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values
- exceljs
- Other injection
- CVSS 8.7 High
exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename
- exceljs
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization
- exceljs
- Prototype pollution
- CVSS 8.7 High
exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression
- exceljs
- CWE-409