xlnt vulnerabilities

2 known vulnerabilities in xlnt from Xlnt-community. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  xlnt: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-3663Mar 7, 2026Xlnt-community

  A vulnerability was found in xlnt-community xlnt up to 1.6.1. This issue affects the function xlnt::detail::compound_document_istreambuf::xsgetn of the file source/detail/cryptography/compound_document.cpp of the component XLSX File Parser. Performing a manipu

• 7.8 High severity

  xlnt: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-3463Mar 3, 2026Xlnt-community

  A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binary_writer::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow.