Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Spreadsheet\:\:parsexlsx
(Tozt)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-01-09 | CVE-2024-22368 | The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells. | Spreadsheet\:\:parsexlsx | 5.5 | ||
| 2024-01-18 | CVE-2024-23525 | The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig. | Spreadsheet\:\:parsexlsx | 6.5 |