Skip to content

Commit 307d7d5

Browse files
authored
Merge pull request monitorjbl#197 from monitorjbl/readme-update
Updating readme with yourkit logo
2 parents f497bc1 + db46162 commit 307d7d5

1 file changed

Lines changed: 1 addition & 5 deletions

File tree

README.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,6 @@
11
[![Run Status](https://api.shippable.com/projects/55cfbb00edd7f2c052a980a5/badge?branch=master)](https://app.shippable.com/projects/55cfbb00edd7f2c052a980a5)
22

3-
# !!! Security Alert !!!
4-
5-
Update to the [latest version (2.1.0)](https://search.maven.org/artifact/com.monitorjbl/xlsx-streamer/2.1.0/jar) **as soon as possible** to fix a critical vulnerability. The Xerxes XML parsing library that Excel Streaming Reader uses defaulted to allowing [entity expansion](https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet), which could be exploited by an attacker to read arbitrary data from your system. The latest versions of Excel Streaming Reader do not allow this and will throw a `ParsingException` if a workbook contains an XML document with an entity declaration.
6-
7-
Many thanks to [Marc Wickenden](https://www.4armed.com/blog/excel-streaming-reader-vulnerability/) at 4Armed for finding this vulnerability and helping verify the patch!
3+
Profiled with [![Yourkit](https://www.yourkit.com/images/yklogo.png)](https://www.yourkit.com/java/profiler/)
84

95
# Excel Streaming Reader
106

0 commit comments

Comments
 (0)