/ 
Spreadsheet-ParseXLSX-0.17
⭐ Starred 1
Security Advisories (2)
CVE-2024-22368 (2024-01-03)

The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells.

CVE-2024-23525 (2024-01-17)

In default configuration of Spreadsheet::ParseXLSX, whenever we call Spreadsheet::ParseXLSX->new()->parse('user_input_file.xlsx'), we'd be vulnerable for XXE vulnerability if the XLSX file that we are parsing is from user input.

Changes for version 0.17 - 2015-03-25

  • Fix using_1904_date (f20, #31)
  • Add support for get_header, get_footer, get_margin_*, get_print_scale, get_paper, is_portrait, and get_start_page, and also fill in the BdrDiag, Rotate, Indent, and Shrink format properties (Dave Clarke, #35)
  • Fix JasperSoft-created files (rdboisvert, #27)
  • bump required perl version to 5.010 (zhouzhen1, #33)
  • Fix Google Drive-created files (reported by ovidiubarbu, #29)

Modules

Spreadsheet::ParseXLSX
parse XLSX files

Other files