CVE-2026-128340 | ExcelJS up to 4.4.0 xl/workbook.xml xlsx.load memory allocation

November 13, 2026 Yanac

A vulnerability categorized as problematic has been discovered in ExcelJS up to 4.4.0. The impacted element is the function xlsx.load of the file xl/workbook.xml. The manipulation results in uncontrolled memory allocation.

This vulnerability is cataloged as CVE-2026-128340. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More