| Package | Affected versions | Patched versions |
|---|---|---|
| spreadsheet | < 0.30 | 0.30 |
The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free