← All advisories

High severity7.5GHSA Advisory· Published Apr 5, 2024· Updated Apr 15, 2026

CVE-2024-22363

CVE-2024-22363

Description

SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
xlsxnpm	>= 0	—

Affected products

6

Lumiverse/SheetjsGHSA
Range: < 0.20.2
osv-coords5 versions
pkg:apk/chainguard/sqlpad pkg:apk/chainguard/sqlpad-compat pkg:apk/wolfi/sqlpad pkg:apk/wolfi/sqlpad-compat pkg:npm/xlsx
< 7.4.1-r3+ 4 more
- (no CPE)range: < 7.4.1-r3
- (no CPE)range: < 7.4.1-r3
- (no CPE)range: < 7.4.1-r3
- (no CPE)range: < 7.4.1-r3
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-5pgg-2g8v-p4x9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-22363ghsaADVISORY
cdn.sheetjs.comghsaWEB
cdn.sheetjs.com/advisories/CVE-2024-22363nvdWEB
cwe.mitre.org/data/definitions/1333.htmlnvdWEB

News mentions

0

No linked articles in our index yet.