CVE-2026-78206 - exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-58107 [未知] CVE-2026-58107 - CodeChecker's massStoreRun processing path performs o…
• CVE-2026-59274 [中危] CVE-2026-59274 - The UnZipTransformer does not limit decompressed entr…
• CVE-2026-54556 [未知] CVE-2026-54556 - Http4s is a Scala interface for HTTP services. Prior …
• CVE-2026-78206 [高危] CVE-2026-78206 - exceljs through 4.4.0 decompresses all entries from s…
• CVE-2026-18929 [未知] CVE-2026-18929 - Carbone is vulnerable to Denial of Service due to lac…
• CVE-2026-75047 [中危] CVE-2026-75047 - In JetBrains YouTrack before 2026.2.18177 doS attack …
• CVE-2026-21441 [高危] CVE-2026-21441 - urllib3 is an HTTP client library for Python. urllib3…