https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:45:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207094 EUVD-2026-207094 https://cve.radiocsirt.org/vuln/euvd-2026-207094 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55878 <p>SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don&#39;t use direct publication via toHTMLEx.</p> <p>SimpleXLSX is software for parsing and retrieving data from Excel XLSx files. Starting in version 1.0.12 and prior to version 1.1.12, when calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code. Version 1.1.12 fixes the issue. As a workaround, don&#39;t use direct publication via toHTMLEx.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55878 https://cve.radiocsirt.org/vuln/ghsa-x6mh-rjwm-8ph7 <p><strong>Affected:</strong> Packagist: shuchkin/simplexlsx</p> <p>### Impact When calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code.</p> <p>### Patches The supplied patch resolves this vulnerability for SimpleXLSX. Use 1.1.12</p> <p>### Workarounds Don&#39;t use direct publication via toHTMLEx</p> <p>*** This vulnerability was discovered by Aleksey Solovev (Positive Technologies)</p> <p><strong>Affected:</strong> Packagist: shuchkin/simplexlsx</p> <p>### Impact When calling the extended toHTMLEx method, it is possible to execute arbitrary JavaScript code.</p> <p>### Patches The supplied patch resolves this vulnerability for SimpleXLSX. Use 1.1.12</p> <p>### Workarounds Don&#39;t use direct publication via toHTMLEx</p> <p>*** This vulnerability was discovered by Aleksey Solovev (Positive Technologies)</p> https://cve.radiocsirt.org/vuln/ghsa-x6mh-rjwm-8ph7