Skip to content
Eexceljs
Products
| Product | CVEs | Exploited | Latest |
|---|
| exceljs | 4 | – | Aug 24, 2026 |
Exploited and recent CVEs
-
CVE-2026-78209
High 8.2
exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values
0.4%
-
CVE-2026-78208
High 7.5
exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename
0.5%
-
CVE-2026-78207
Critical 9.4
exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization
0.6%
-
CVE-2026-78206
High 7.5
exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression
0.6%