High severity7.8NVD Advisory· Published Apr 24, 2023· Updated Jun 17, 2026

CVE-2023-30533

Description

SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
xlsxnpm	>= 0	—

Affected products

Sheetjs/Sheetjs
cpe:2.3:a:sheetjs:sheetjs:*:*:*:*:*:node.js:*:*
Range: <0.19.3
SheetJS/SheetJS Community Editiondescription
ghsa-coords
pkg:npm/xlsx
Range: >= 0

Patches

Vulnerability mechanics

References

cdn.sheetjs.com/advisories/CVE-2023-30533nvdVendor AdvisoryWEB
github.com/advisories/GHSA-4r6h-8v6p-xvw6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-30533ghsaADVISORY
cdn.sheetjs.comghsaWEB
git.sheetjs.com/sheetjs/sheetjs/issues/2667ghsaWEB
git.sheetjs.com/sheetjs/sheetjs/issues/2986nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000