Skip to main content Skip to footer

SpreadJS Designer external dependency vulnerability in Seroval introduced by SolidJS

External dependency of SpreadJS Designer, seroval, was found to have security vulnerabilities.

CVE: https://github.com/advisories/GHSA-f86p-h4j2-7qgj , https://github.com/advisories/GHSA-9wx9-5pv9-3349 , https://github.com/advisories/GHSA-97r2-qh9m-474h , https://github.com/advisories/GHSA-wp97-x4hv-qvhp , https://github.com/advisories/GHSA-7rv5-mrxv-xcr9 

Remediation

Upgrade seroval to 1.6.11 or later.

Note: SpreadJS product is unaffected by these vulnerabilities but we are updating dependencies out of caution and will be released in 19.2.6. We still recommend customers update these packages immediately as well.  

SpreadJS Notifications