fix(Google Sheets Node): Upgrade xlsx to address CVE-2023-30533 (#6172)

[GitHub Advisory](GHSA-4r6h-8v6p-xvw6)
n8n-io · May 15, 2023 · c786525 · c786525
1 parent 1403333
commit c786525
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 88 deletions.
diff --git a/package.json b/package.json
@@ -79,6 +79,7 @@
       "tslib": "^2.5.0",
       "ts-node": "^10.9.1",
       "typescript": "^5.0.3",
+      "xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz",
       "xml2js": "^0.5.0",
       "cpy@8>globby": "^11.1.0",
       "qqjs>globby": "^11.1.0"

diff --git a/packages/nodes-base/nodes/SpreadsheetFile/test/SpreadsheetFile.test.ts b/packages/nodes-base/nodes/SpreadsheetFile/test/SpreadsheetFile.test.ts
@@ -87,9 +87,9 @@ describe('Execute Spreadsheet File Node', () => {
 										mimeType: 'text/csv',
 										fileType: 'text',
 										fileExtension: 'csv',
-										data: '77u/QSxCLEMKMSwyLDMKNCw1LDYK',
+										data: '77u/QSxCLEMKMSwyLDMKNCw1LDY=',
 										fileName: 'spreadsheet.csv',
-										fileSize: '21 B',
+										fileSize: '20 B',
 									},
 								},
 							},

diff --git a/packages/nodes-base/package.json b/packages/nodes-base/package.json
@@ -901,7 +901,7 @@
     "tmp-promise": "^3.0.2",
     "uuid": "^8.3.2",
     "vm2": "~3.9.17",
-    "xlsx": "^0.17.0",
+    "xlsx": "^0.19.3",
     "xml2js": "^0.5.0"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml