danfojs
danfojs copied to clipboard
Security issue on XLSX dependency
XLSX library that is bundled with danfojs has secirity issue. Suggest upgrade dependency to 0.19.3 of xlsx:
$ npm audit
npm audit report
xlsx *
Severity: high
Prototype Pollution in sheetJS - https://github.com/advisories/GHSA-4r6h-8v6p-xvw6
fix available via npm audit fix --force
Will install [email protected], which is a breaking change
node_modules/danfojs/node_modules/xlsx
danfojs >=0.1.2
Depends on vulnerable versions of xlsx
node_modules/danfojs
2 high severity vulnerabilities