exceljs vulnerabilities
17 published CVEs name exceljs among the affected products.
- 17Published CVEs17 of them scored
- 17Last 12 monthspublished in the last year
- 1Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-128336
ExcelJS through 4.4.0 Prototype Pollution via __proto__ Defined Name
exceljs · exceljs
Medium6.3 - CVE-2026-128337
ExcelJS through 4.4.0 Prototype Pollution via x14 Conditional Formatting Rule ID
exceljs · exceljs
High8.3 - CVE-2026-128338
ExcelJS through 4.4.0 Memory Exhaustion via Unbounded Worksheet Column Range
exceljs · exceljs
High8.7 - CVE-2026-128339
ExcelJS through 4.4.0 Memory Exhaustion via Oversized Merged Cell Range
exceljs · exceljs
High8.7 - CVE-2026-128340
ExcelJS through 4.4.0 Memory Exhaustion via Oversized Defined Name Range
exceljs · exceljs
High8.7 - CVE-2026-128341
ExcelJS through 4.4.0 Denial of Service via Oversized Data Validation sqref
exceljs · exceljs
High8.7 - CVE-2026-128342
ExcelJS through 4.4.0 Denial of Service via Oversized Worksheet sheetId
exceljs · exceljs
High8.7 - CVE-2026-128343
ExcelJS through 4.4.0 Denial of Service via Oversized Row Number
exceljs · exceljs
High8.7 - CVE-2026-128344
ExcelJS through 4.4.0 Memory Exhaustion via Oversized Image Anchor Column
exceljs · exceljs
High8.7 - CVE-2026-128345
ExcelJS through 4.4.0 ReDoS via slideFormula Shared Formula Translation
exceljs · exceljs
Medium6.9