CVE-2024-22363: 
JavaScript vulnerability analysis and mitigation

SheetJS Community Edition before version 0.20.2 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability was disclosed on April 5, 2024, and affects all versions of SheetJS CE up to version 0.20.1 (SheetJS Advisory).

The vulnerability is classified as CWE-1333 (Inefficient Regular Expression Complexity) and has received a CVSS v3.1 score of 7.5 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue stems from inefficient regular expression patterns that can cause excessive CPU consumption through catastrophic backtracking (NVD, SheetJS Advisory).

When exploited, this vulnerability can lead to Denial of Service (DoS) through excessive CPU consumption. The attack can be triggered remotely without requiring authentication or user interaction, potentially affecting the availability of systems using the vulnerable versions of SheetJS (SheetJS Advisory).

Users should upgrade to SheetJS Community Edition version 0.20.2 or later to address this vulnerability. The fix is available through official releases on the SheetJS CDN (SheetJS Advisory).