{"id":"UBUNTU-CVE-2026-115943","details":"Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as [\u003e100], ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the workbook, and the eval runs while Spreadsheet::XLSX-\u003enew parses it. An attacker who supplies an XLSX file can run arbitrary Perl code.","modified":"2026-11-04T03:30:24.424284635Z","published":"2026-11-03T00:00:00Z","upstream":["CVE-2026-115943"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-115943"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-115943"},{"type":"REPORT","url":"https://lists.security.metacpan.org/cve-announce/msg/44746764/"},{"type":"REPORT","url":"https://metacpan.org/release/ASB/Spreadsheet-XLSX-0.19/changes"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2026/10/30/3"}],"affected":[{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13-1","0.15-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libspreadsheet-xlsx-perl","binary_version":"0.15-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libspreadsheet-xlsx-perl","binary_version":"0.15-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libspreadsheet-xlsx-perl","binary_version":"0.15-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15-2","0.16-1","0.17-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.17-1","binary_name":"libspreadsheet-xlsx-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libspreadsheet-xlsx-perl","binary_version":"0.17-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.18-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.18-1","binary_name":"libspreadsheet-xlsx-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}},{"package":{"name":"libspreadsheet-xlsx-perl","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/libspreadsheet-xlsx-perl?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.18-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.18-1","binary_name":"libspreadsheet-xlsx-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-115943.json"}}],"schema_version":"1.9.2","severity":[{"type":"Ubuntu","score":"medium"}]}