CVE-2023-7101

Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing
Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code
execution (ACE) vulnerability due to passing unvalidated input from a file
into a string-type “eval”. Specifically, the issue stems from the
evaluation of Number format strings (not to be confused with printf-style
format strings) within the Excel parsing logic.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059450&gt;