ng-material-extensions icon indicating copy to clipboard operation
ng-material-extensions copied to clipboard

Unable to resolve security vulnerability in mat-table-exporter using npm

Open NPcallumt opened this issue 1 year ago • 6 comments

Cannot resolve vulnerability detailed here: https://github.com/advisories/GHSA-4r6h-8v6p-xvw6

mat-table-exporter 15.0.0 (newest version?) depending on xlsx ^0.18.5 and patched version (0.19.3) is not available through npm as detailed here: https://docs.sheetjs.com/docs/getting-started/installation/nodejs/

NPcallumt avatar Apr 26 '23 09:04 NPcallumt

Looks like the project is not maintained on GitHub anymore (see: https://github.com/SheetJS/sheetjs/issues/2822#issuecomment-1532922059) not sure why the npm page wasn't updated.

In the meantime, this project could update its package.json with the new xlsx version/source, that is https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz

luca-drf avatar Jun 23 '23 11:06 luca-drf

It would be nice if the author could use the tarball instead of the npm package in the package.json!

ng-mrk avatar Aug 08 '23 09:08 ng-mrk

It would be nice if the author could use the tarball instead of the npm package in the package.json!

or switch to another package that is maintained in npm repo

tw2as avatar Oct 10 '23 09:10 tw2as

Any solution to this, guys?

thong-le98 avatar Nov 23 '23 14:11 thong-le98

Same story for me. Adding "xlsx": https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz in resolutions does not help. After build it throws the following error "Error: Module not found: Error: Can't resolve 'xlsx/dist/xlsx.mini.min' in 'node_modules/cdk-table-exporter/fesm2020'" Any ideas how to resolve ? I even try to move xlsx to my project and modify package json there but no success

VM1801 avatar Nov 27 '23 17:11 VM1801