npm/odf-kit: medium 6.1

odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values

Action: Upgrade odf-kit to 0.14.2 or later.

npm i odf-kit@0.14.2

Affected

Fixed versions

Sources

• osv: GHSA-2rqm-h6hv-g79v
• https://github.com/GitHubNewbie0/odf-kit/security/advisories/GHSA-2rqm-h6hv-g79v
• https://github.com/GitHubNewbie0/odf-kit/commit/1424227d1ca2716a249b623d1456575ff0331dcc
• https://github.com/GitHubNewbie0/odf-kit

published 2026-10-23T20:55:31Z · modified 2026-10-23T21:00:05.237565089Z · JSON