CyberRota Analysis
AI-GeneratedThe exceljs-hardened library versions prior to 5.0.0 are vulnerable to a denial-of-service attack due to the unrestricted decompression of xlsx files, allowing attackers to upload highly compressed workbooks that can expand to consume excessive memory resources. This can lead to application crashes or unresponsive states, impacting system availability. Organizations using this library should prioritize updating to the latest version to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service.