Skip to content
OpenAdvisories
High USN-4821-1 1 CVE

openpyxl vulnerability

Published Mar 15, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that openpyxl incorrectly handled certain documents. A
remote attacker could possibly use this issue to cause a denial of service
or other unspecified impact.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS openpyxl 2.3.0-1ubuntu0.1~esm1

Vulnerabilities 1

  • High 8.2
    CVE-2017-5992

    Improper Restriction of XML External Entity Reference in Openpyxl

    Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.

    openpyxl openpyxl openpyxl Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2017-5992