Skip to content
OpenAdvisories

Package · crates.io

sheets-diff

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    GHSA-w5x2-6474-pqp4

    A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process

    Affected versions passed caller-supplied bytes to `calamine`'s `Xlsx::new` without first checking that they were a ZIP archive. `Xlsx::new` tests for password protection on its first line, which parses the input as an OLE/CFB container, and a sector-count fie…

    sheets-diff crates.io