{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"xlsx","cve_ids":["CVE-2023-30533"],"ecosystem":"npm","epss":0.00988,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4r6h-8v6p-xvw6","id":"tcs_01M5KF1AZE91BJDXC6H97Z98AV","modified_at":"2025-09-19T15:23:40Z","published_at":"2023-04-24T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-4r6h-8v6p-xvw6","https://nvd.nist.gov/vuln/detail/CVE-2023-30533","https://cdn.sheetjs.com","https://cdn.sheetjs.com/advisories/CVE-2023-30533","https://git.sheetjs.com/sheetjs/sheetjs","https://git.sheetjs.com/sheetjs/sheetjs/issues/2667","https://git.sheetjs.com/sheetjs/sheetjs/issues/2986","https://git.sheetjs.com/sheetjs/sheetjs/src/branch/master/CHANGELOG.md"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-4r6h-8v6p-xvw6","url":"https://osv.dev/vulnerability/GHSA-4r6h-8v6p-xvw6"}],"summary":"Prototype Pollution in sheetJS"}