Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

openpyxl

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
PyPI

Advisories 1

  • Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.

    Affected: fixed in 2.4.1; fixed in 2.4.2.