CVE-2026-128345 | ExcelJS up to 4.4.0 slideFormula shared-formula.js redos

November 13, 2026 Yanac

A vulnerability labeled as problematic has been found in ExcelJS up to 4.4.0. This impacts an unknown function of the file lib/utils/shared-formula.js of the component slideFormula. Such manipulation leads to inefficient regular expression complexity.

This vulnerability is documented as CVE-2026-128345. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More