The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition during parsing of a crafted XLSX document. This occurs because the memoize implementation does not have appropriate constraints on merged cells.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-22368.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "0.28" } ] }, { "events": [ { "introduced": "0" }, { "fixed": "0.28" } ] } ]