CVE-2026-128341 | ExcelJS up to 4.4.0 Data Validations data-validations-xform.js xlsx.load sqref resource consumption

November 13, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in ExcelJS up to 4.4.0. Affected by this vulnerability is the function xlsx.load of the file data-validations-xform.js of the component Data Validations. The manipulation of the argument sqref leads to resource consumption.

This vulnerability is uniquely identified as CVE-2026-128341. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More