fix(segurança): substituir xlsx por exceljs (CVEs sem patch no npm)

Browse Source

xlsx@0.18.5 tem Prototype Pollution e ReDoS sem versão corrigida no
npm. Migrado para exceljs@4.4.0 nos 4 pontos de uso: parser de
importação, geração de template, exportação de lançamentos e
exportação de relatório de categorias.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Felipe Coutinho

2026-04-04 03:12:04 +00:00

parent 10afef9fec

commit df996df93d

6 changed files with 710 additions and 145 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

646

pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff