npm/x-data-spreadsheet CVE-2022-25646: medium 6.1, EPSS 0.91%
x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x5cw-843f-r366
- https://nvd.nist.gov/vuln/detail/CVE-2022-25646
- https://github.com/myliang/x-spreadsheet/issues/580
- https://github.com/myliang/x-spreadsheet
- https://security.snyk.io/vuln/SNYK-JS-XDATASPREADSHEET-2430381
- https://youtu.be/Ij-8VVKNh7U
CVE-2022-25646 · published · modified · JSON