PT-2026-59373

Related advisory This advisory tracks a regression of the original Excel-preview XSS that was publicly disclosed and patched under GHSA-jwf8-pv5p-vhmc patched in v0.8.0. The same root cause — XLSX.utils.sheet to html output rendered via @html excelHtml without DOMPurify — was reintroduced sometim...