xlsx

SheetJS SheetJS Community Edition은 거의 모든 복잡한 스프레드시트에서 유용한 데이터를 추출하고, 레거시 및 최신 소프트웨어 모두에서 작동하는 새 스프레드시트를 생성하기 위한 실전 검증된 오픈소스 솔루션을 제공합니다. SheetJS Pro는 데이터 처리 그 이상의 솔루션을 제공합니다: 복잡한 템플릿을 쉽게 편집하고, 스타일링으로 내면의 피카소를 꺼내며, 이미지/그래프/피벗 테이블이 있는 사용자 지정 시트를 만들고, 수식 표현식을 평가하고 계산을 웹 앱으로 포팅하며, 일반적인 스프레드시트 작업을 자동화하...

CVE-2026-59933 PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the OLE reader follows sector chains from attacker-controlled XLS/OLE...

Apache Fesod 安全漏洞

Apache Fesod is a high-performance spreadsheet file reading and writing library developed by the Apache Foundation in the United States. Versions of Apache Fesod prior to 2.0.2-incubating contained security vulnerabilities. These vulnerabilities were caused by a request forgeing issue in the...

Cross-site Scripting (XSS)

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Cross-site Scripting XSS in the HTML export process when handling custom number format codes containing the @ text placeholder. ...

EUVD-2025-25699

Malicious code in bioql PyPI...

The vulnerability of the setPath() function in the PHP Spreadsheet library, which allows an attacker to perform an SSRF attack

The vulnerability of the setPath function in the PHP Spreadsheet library is related to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the generateRow() function in the PHP Spreadsheet library allows attackers to perform cross-site scripting attacks.

The vulnerability of the generateRow function in the PHP Spreadsheet library is related to the lack of protective measures for web page structures. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the href attributes in hyperlinks due to improper sanitization of "javascript:" URLs. An attacker can inject malicious scripts that are executed in the context of the user's browser by crafting malicious...

GHSA-X5CW-843F-R366 x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting

All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting XSS due to missing sanitization of values inserted into the cells...

CVE-2020-26828

SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types it is possible to enter formulas which can call external applications or execute scripts. The execution of a payload script on target...