Tag
sheetjs
Safeguard articles tagged "sheetjs" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Open Source
Is the npm xlsx Package Safe? A Security Review
A security review of the npm xlsx (SheetJS) package: its prototype pollution and ReDoS CVEs, the npm-versus-CDN patch gap, and how to install it safely.
May 6, 20256 min read
DevSecOps
node-xlsx Security: Handling Untrusted Excel Files Safely
node-xlsx is a thin wrapper around SheetJS, so its security posture is inherited. Here is what that means for parsing untrusted spreadsheets and how to lock it down.
Feb 11, 20256 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.