CVE-2025-22131-PoC

CVE-2025-22131-PoC PoC for CVE-2025-22131 PhpSpreadsheet is a library written in pure PHP and offers a set of classes that allow you to read and write various spreadsheet file formats such as Excel and LibreOffice Calc. phpspreadsheet version =2.2.0, =2.0.0, =3.0.0, sheetIndex === null $sheets =...

caos-os

CAOS — Customer Assurance Operating System 顧客から届くセキュリティ質問書に、一度答えるだけで済むように。 顧客データを扱う企業はみな、同じ依頼を繰り返し受ける。セキュリティ質問書、プライバシー評価、ベンダーリスク審査、調達デューデリジェンス、エビデンス要求だ。ほとんどの組織は手作業で回答している——顧客から届いたスプレッドシート、ポリシーのフォルダ、メールのスレッド、そして前回何と回答したかという誰かの記憶に頼って。...

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Negative shared-string index causes panic in GetCellValue and GetRows Summary Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with -1, the parsed index is negative. T...

CVE-2026-54063

Excelize CVE-2026-54063: The library vulnerable due to checkSheet() using attacker-controlled row attribute to allocate memory for xlsxRow slices without enforcing the Excel row limit. This can cause (A) out-of-memory leading to process kill and (B) runtime panic from out-of-bounds indexing when ...

SUSE CVE-2024-22368

The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells...

WPS-Forms XXE vulnerability in xlsx parsing

WPS-Forms is an office software. WPS Forms suffers from an XXE vulnerability in xlsx parsing. This allows attackers to exploit the vulnerability to cause the disclosure of sensitive user information as well as a DoS Denial of Service on the user's system...