https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T14:46:09.281003+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207094 EUVD-2026-207094 2026-10-17T14:46:09.282987+00:00 EUVD-2026-207094 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55878 fkie_cve-2024-55878 2026-10-17T14:46:09.283017+00:00

SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don't use direct publication via toHTMLEx.

 https://cve.radiocsirt.org/vuln/ghsa-x6mh-rjwm-8ph7 GHSA-x6mh-rjwm-8ph7 — Cross-site Scripting vulnerability in SimpleXLSXEx::readXfs and SimpeXLSX::toHTMLEx 2026-10-17T14:46:09.283047+00:00

Affected: Packagist: shuchkin/simplexlsx

### Impact When calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code.

### Patches The supplied patch resolves this vulnerability for SimpleXLSX. Use 1.1.12

### Workarounds Don't use direct publication via toHTMLEx

*** This vulnerability was discovered by Aleksey Solovev (Positive Technologies)