weareu/xlsx

PoC

SheetJS xlsx 0.18.5 fork with CVE-2023-30533 and CVE-2024-22363 fixes

view exploit source poc_in_githubauthor weareupublished 2026-02-19catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-22363US	—	0.84% (58th)	Exploit	2024-04-05
SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).
CVE-2023-30533US	high7.8	0.99% (62nd)	Exploit	2023-04-24
SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.