https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:48:15.657795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361608 EUVD-2026-361608 2026-10-06T19:48:15.708681+00:00 EUVD-2026-361608 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78206 fkie_cve-2026-78206 2026-10-06T19:48:15.708722+00:00

exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-r7gv-hxj8-94c4 GHSA-r7gv-hxj8-94c4 2026-10-06T19:48:15.708791+00:00

exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service.