Vulnerability found on latest version of json-as-xlsx

[pinceladasdaweb]

Summary

There are vulnerability found in the json-as-xlsx version 2.5.3 due to xlsx.

Possible Solution

Updating the xlsx dependency to patched version: 0.19.3

Context

More information about CVE is here: GHSA-4r6h-8v6p-xvw6

[githubjosh]

please fix this. simply update your dependencies to use the CDN - SheetJS/sheetjs#2822 (comment)

"dependencies" : {
  "xlsl" : "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz"
}

[githubjosh]

related, is this package still being maintained?

[piotrzaborow]

@LuisEnMarroquin can you help with fix the issue?

PR #77 for this is already published and waiting for merging.

[pinceladasdaweb]

@LuisEnMarroquin Please, accept the PR.

[LuisEnMarroquin]

Hello there, sorry, it was a long time since I modified this project

It should be solved by this PR: #88

Can you help me review it? Thanks in advance

[pinceladasdaweb]

Thank you for this fix @LuisEnMarroquin.