odf-kit vulnerabilities (npm)

2 vulnerabilities.

• odf-kit npm odf-kit has HTML injection leading to XSS in odsToHtml() via unescaped style attribute values GHSA-2rqm-h6hv-g79v Fix available 6.1 MediumOctober 23, 2026
• odf-kit npm odf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values CVE-2026-113787 Fix available 6.1 MediumOctober 21, 2026