{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-115943","assignerOrgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","state":"PUBLISHED","assignerShortName":"CPANSec","dateReserved":"2026-10-23T21:59:48.535Z","datePublished":"2026-10-29T21:37:40.697Z","dateUpdated":"2026-10-30T18:27:48.508Z"},"containers":{"cna":{"affected":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","modules":["Spreadsheet::XLSX"],"packageName":"Spreadsheet-XLSX","packageURL":"pkg:cpan/Spreadsheet-XLSX","programFiles":["lib/Spreadsheet/XLSX/Utility2007.pm"],"programRoutines":[{"name":"Spreadsheet::XLSX::Utility2007::ExcelFmt"}],"repo":"https://github.com/asb-capfan/Spreadsheet-XLSX","versions":[{"lessThan":"0.19","status":"affected","version":"0","versionType":"custom"}]}],"credits":[{"lang":"en","type":"reporter","value":"Allen Bertoldo"}],"descriptions":[{"lang":"en","value":"Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt.\n\nWhen a number format has a condition such as [>100], ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the workbook, and the eval runs while Spreadsheet::XLSX->new parses it.\n\nAn attacker who supplies an XLSX file can run arbitrary Perl code."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-95","description":"CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","shortName":"CPANSec","dateUpdated":"2026-10-30T18:27:48.508Z"},"references":[{"tags":["release-notes"],"url":"https://metacpan.org/release/ASB/Spreadsheet-XLSX-0.19/changes"}],"solutions":[{"lang":"en","value":"Upgrade to Spreadsheet-XLSX 0.19 or later."}],"source":{"discovery":"UNKNOWN"},"title":"Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt","x_generator":{"engine":"cpansec-cna-tool 0.1"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/10/30/3"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-10-30T02:08:11.510Z"}}]}}