CVE-2026-128342 | ExcelJS up to 4.4.0 xl/workbook.xml sheetId resource consumption

November 13, 2026 Yanac

A vulnerability identified as problematic has been detected in ExcelJS up to 4.4.0. This affects an unknown function of the file xl/workbook.xml. This manipulation of the argument sheetId causes resource consumption.

This vulnerability is registered as CVE-2026-128342. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More