Unknown · Spreadsheet::Parsexlsx · CVE-2024-22368
**Name of the Vulnerable Software and Affected Versions**
Spreadsheet::ParseXLSX versions prior to 0.28
**Description**
The issue arises from the memoize implementation not having appropriate constraints on merged cells, leading to an out-of-memory condition when parsing a crafted XLSX document. This can cause a denial of service.
**Recommendations**
For versions prior to 0.28, update to version 0.28 or later to resolve the issue. As a temporary workaround, consider implementing constraints on merged cells in the memoize implementation to prevent out-of-memory conditions.