Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to resolve security vulnerability in mat-table-exporter using npm #181

Open
NPcallumt opened this issue Apr 26, 2023 · 5 comments
Open
Assignees

Comments

@NPcallumt
Copy link

Cannot resolve vulnerability detailed here: GHSA-4r6h-8v6p-xvw6

mat-table-exporter 15.0.0 (newest version?) depending on xlsx ^0.18.5 and patched version (0.19.3) is not available through npm as detailed here: https://docs.sheetjs.com/docs/getting-started/installation/nodejs/

@luca-drf
Copy link

Looks like the project is not maintained on GitHub anymore (see: SheetJS/sheetjs#2822 (comment)) not sure why the npm page wasn't updated.

In the meantime, this project could update its package.json with the new xlsx version/source, that is https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz

@ng-mrk
Copy link

ng-mrk commented Aug 8, 2023

It would be nice if the author could use the tarball instead of the npm package in the package.json!

@tw2as
Copy link

tw2as commented Oct 10, 2023

It would be nice if the author could use the tarball instead of the npm package in the package.json!

or switch to another package that is maintained in npm repo

@HalitTalha HalitTalha self-assigned this Oct 10, 2023
@thong-le98
Copy link

Any solution to this, guys?

@VM1801
Copy link

VM1801 commented Nov 27, 2023

Same story for me. Adding
"xlsx": https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz in resolutions does not help. After build it throws the following error "Error: Module not found: Error: Can't resolve 'xlsx/dist/xlsx.mini.min' in 'node_modules/cdk-table-exporter/fesm2020'"
Any ideas how to resolve ? I even try to move xlsx to my project and modify package json there but no success

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

7 participants