Skip to content
OpenAdvisories

Package · crates.io

calamine

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    RUSTSEC-2026-0436

    Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input

    The Compound File Binary (OLE2) parser (`src/cfb.rs`), used when reading `.xls` and `.xlsb` workbooks and when extracting VBA projects from `.xlsx`, can panic or allocate without bound on crafted input. Both are reachable through the public reader API (`open_…

    calamine crates.io