Roadmap to fix XSLX vulnerabilty #609
Replies: 4 comments 3 replies
-
|
Agreed. It's a year later and they still have these changes sitting on the dev branch. When will we get a new NPM release with these changes? |
Beta Was this translation helpful? Give feedback.
-
|
They are not maintaining this repo. If anyone is interested, we can clone it and create a new package with the same functionality. |
Beta Was this translation helpful? Give feedback.
-
|
Jeah, not much happened here in the last 2 years ... Well, browser based data processing in not so interesting given the limitations imposed by CORS when accessing resources. Anyway, browser based demos or educational tools are usefull, I believe. I started a couple of thing a while ago, basically aiming for a simplified version of https://orangedatamining.com/ or https://www.knime.com/ in the browser to show people how to use open data (and to get some data skills). |
Beta Was this translation helpful? Give feedback.
-
|
Looks like we just got some updates! Woo! |
Beta Was this translation helpful? Give feedback.
-
|
Yeah, sorry for the delay on this. I'm reviewing existing PRs, and fixing some high priority issues. Will be releasing a new version tomorrow. |
Beta Was this translation helpful? Give feedback.
-
|
Awesome! Thanks so much! :)
…________________________________
From: Rising Odegua ***@***.***>
Sent: Wednesday, April 2, 2025 11:23:05 a.m.
To: javascriptdata/danfojs ***@***.***>
Cc: Zander ***@***.***>; Comment ***@***.***>
Subject: Re: [javascriptdata/danfojs] Roadmap to fix XSLX vulnerabilty (Discussion #609)
Yeah, sorry for the delay on this. I'm reviewing existing PRs, and fixing some high priority issues. Will be releasing a new version tomorrow.
—
Reply to this email directly, view it on GitHub<#609 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AG2WCUEKKIXNPW7RZGPDQNL2XP6FRAVCNFSM6AAAAABZ3HAOUOVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTENZQGI2TAMI>.
You are receiving this because you commented.
|
Beta Was this translation helpful? Give feedback.
-
|
New version 1.2.0 has been released with this fix. |
Beta Was this translation helpful? Give feedback.
-
The master branch has a dependency on a vulnerable XLSX version which is fixed in the dev branch already. What keeps you from upgrading the master branch for so long? Any help on particular topics required?
Beta Was this translation helpful? Give feedback.
All reactions