https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:59:56.363434+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234392 EUVD-2026-234392 2026-10-10T17:59:56.365902+00:00 EUVD-2026-234392 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23640 fkie_cve-2022-23640 2026-10-10T17:59:56.365936+00:00

Excel-Streaming-Reader is an easy-to-use implementation of a streaming Excel reader using Apache POI. Prior to xlsx-streamer 2.1.0, the XML parser that was used did apply all the necessary settings to prevent XML Entity Expansion issues. Upgrade to version 2.1.0 to receive a patch. There is no known workaround.

 https://cve.radiocsirt.org/vuln/ghsa-xvm2-9xvc-hx7f GHSA-xvm2-9xvc-hx7f — Improper Restriction of XML External Entity Reference in com.monitorjbl:xlsx-streamer 2026-10-10T17:59:56.365968+00:00

Affected: Maven: com.monitorjbl:xlsx-streamer

### Impact Prior to xlsx-streamer 2.1.0, the XML parser that was used did not apply all the necessary settings to prevent XML Entity Expansion issues.

### Patches Upgrade to version 2.1.0.

### Workarounds No known workaround.

### References https://github.com/monitorjbl/excel-streaming-reader/commit/0749c7b9709db078ccdeada16d46a34bc2910c73

### For more information If you have any questions or comments about this advisory: * Open an issue in [monitorjbl/excel-streaming-reader](https://github.com/monitorjbl/excel-streaming-reader)

 https://cve.radiocsirt.org/vuln/gsd-2022-23640 gsd-2022-23640 2026-10-10T17:59:56.365998+00:00 gsd-2022-23640