[Security] Prototype Pollution in sheetJS
Author: lukewang2018Created Apr 27, 2023Updated May 24, 2026
[Security] Prototype Pollution in sheetJS
https://github.com/advisories/GHSA-4r6h-8v6p-xvw6
Affected version: 0.19.3
Description All versions of SheetJS CE through 0.19.2 are vulnerable to "Prototype Pollution" when reading specially crafted files. Workflows that do not read arbitrary files (for example, exporting data to spreadsheet files) are unaffected.
References https://nvd.nist.gov/vuln/detail/CVE-2023-30533 https://cdn.sheetjs.com/advisories/CVE-2023-30533 https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md
Source: SheetJS/sheetjs