python313-openpyxl-3.1.5-1.8 on GA media (moderate)

python313-openpyxl-3.1.5-1.8 on GA media Announcement ID: openSUSE-SU-2026:12023-1 Rating: moderate Cross-References: CVE-2017-5992 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-105732

These are all security issues fixed in the python313-openpyxl-3.1.5-1.8 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12023-1 python313-openpyxl-3.1.5-1.8 on GA media

These are all security issues fixed in the python313-openpyxl-3.1.5-1.8 package on the GA media of openSUSE Tumbleweed...

EUVD-2017-0081

Malware in sbrugna...

OPENSUSE-SU-2024:14028-1 python310-openpyxl-3.1.3-1.1 on GA media

These are all security issues fixed in the python310-openpyxl-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 16.04 ESM : openpyxl vulnerability (USN-4821-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4821-1 advisory. It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or other...

MAL-2023-1932 Malicious code in oppenpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c0704ef0fb0f95a787c64c7fc95d11650d781e20d2235f55728171a19edac6c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1928 Malicious code in openypxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e947261e8b6035b3a50c9d863b2bf3f8edc82e383f50ddaf68b68170ac69e946 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in oppenpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9c0704ef0fb0f95a787c64c7fc95d11650d781e20d2235f55728171a19edac6c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1919 Malicious code in oopenpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 52b56c7cbec53df26a5fd13a169c2d4e3305fa42cdc4ed265c2e88b217a47f2e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in opnepyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bb0861ce0ca02fb4851edf7d90db5ae2472652e05fbcfb3d5f2350b303f913c6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in oopenpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 52b56c7cbec53df26a5fd13a169c2d4e3305fa42cdc4ed265c2e88b217a47f2e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1925 Malicious code in openpyxll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c696c8d63729641d6b81cedcf454ad1c354afebacfc76559df267b7833cadb81 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in oepnpyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f54d3df2e0dfcb8b4f7f2ded14c17e6fb804bfa85d891e0c68ad89ae7a29c59 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Ubuntu: Security Advisory (USN-4821-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

commcaretranslationchecker (>=0.9.2, <=0.9.2.41), data-importer (3.1.1) +10 more potentially affected by CVE-2017-5992 via openpyxl (>=2.0.5, <=2.4.1)

openpyxl PYPI version =2.0.5, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =1.3.0, =0.9.0, =0.1.7b0, =0.9.0, =1.6.0, =0.1.3.5, =1.6.2 Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

pandalone (>=0.1.0, <=0.1.12) potentially affected by CVE-2017-5992 via openpyxl (1.8.6)

openpyxl PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on openpyxl and may be impacted: - pandalone =0.1.0, =0.1.12 Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

commcaretranslationchecker (>=0.9.2, <=0.9.2.41), data-importer (3.1.1) +10 more potentially affected by CVE-2017-5992 via openpyxl (>=2.0.5, <=2.4.1)

openpyxl PYPI version =2.0.5, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =1.3.0, =0.9.0, =0.1.7b0, =0.9.0, =1.6.0, =0.1.3.5, =1.6.2 Source cves: CVE-2017-5992 Source advisory: GHSA-CHQF-HX79-GXC6...

airtestproject (>=0.1.0, <=0.1.2) potentially affected by CVE-2017-5992 via openpyxl (1.1.0)

openpyxl PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on openpyxl and may be impacted: - airtestproject =0.1.0, =0.1.2 Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

GHSA-CHQF-HX79-GXC6 Improper Restriction of XML External Entity Reference in Openpyxl

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...