{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"xlsx","cve_ids":["CVE-2024-22363"],"ecosystem":"npm","epss":0.00843,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5pgg-2g8v-p4x9","id":"tcs_01M5KF4BB43HJ6TM1DVJVE2CW8","modified_at":"2026-09-10T03:49:18.872216794Z","published_at":"2024-04-05T06:30:46Z","references":["https://osv.dev/vulnerability/GHSA-5pgg-2g8v-p4x9","https://nvd.nist.gov/vuln/detail/CVE-2024-22363","https://cdn.sheetjs.com","https://cdn.sheetjs.com/advisories/CVE-2024-22363","https://cwe.mitre.org/data/definitions/1333.html","https://git.sheetjs.com/sheetjs/sheetjs","https://git.sheetjs.com/sheetjs/sheetjs/src/tag/v0.20.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5pgg-2g8v-p4x9","url":"https://osv.dev/vulnerability/GHSA-5pgg-2g8v-p4x9"}],"summary":"SheetJS Regular Expression Denial of Service (ReDoS)"}