danfojs icon indicating copy to clipboard operation
danfojs copied to clipboard

Security issue on XLSX dependency

Open digital-codes opened this issue 2 years ago • 0 comments

XLSX library that is bundled with danfojs has secirity issue. Suggest upgrade dependency to 0.19.3 of xlsx:

$ npm audit

npm audit report

xlsx * Severity: high Prototype Pollution in sheetJS - https://github.com/advisories/GHSA-4r6h-8v6p-xvw6 fix available via npm audit fix --force Will install [email protected], which is a breaking change node_modules/danfojs/node_modules/xlsx danfojs >=0.1.2 Depends on vulnerable versions of xlsx node_modules/danfojs

2 high severity vulnerabilities

digital-codes avatar May 03 '23 04:05 digital-codes