Security Advisories (1)
CVE-2024-23525 (2024-01-17)

In default configuration of Spreadsheet::ParseXLSX, whenever we call Spreadsheet::ParseXLSX->new()->parse('user_input_file.xlsx'), we'd be vulnerable for XXE vulnerability if the XLSX file that we are parsing is from user input.

NAME

Spreadsheet::ParseXLSX::Decryptor - helper class to open password protected files

VERSION

version 0.29

AUTHOR

Jesse Luehrs <doy@tozt.net>

COPYRIGHT AND LICENSE

This software is Copyright (c) 2024 by Jesse Luehrs.

This is free software, licensed under:

The MIT (X11) License