# sonatype-2018-0622

xlsx - Regular Expression Denial of Service (ReDoS)

Published Feb 14, 2020

## Security Details

### Components Impacted

#### CVE ID
sonatype-2018-0622

#### CVE Description
xlsx - Regular Expression Denial of Service (ReDoS)

#### CVSS Score & Severity
7.5 High

#### CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

#### EPSS Score
0%

#### Malware
malware

#### KEV Status
Not in KEV Catalog: No known exploits

#### Affected Ecosystems
affected

#### Source
Sonatype

### References
- [GitHub · Release](https://github.com/SheetJS/sheetjs/releases/tag/v0.12.2)
- [GitHub · Issue #1904](https://github.com/SheetJS/sheetjs/issues/1904)