AIKIDO-2026-10125

TL;DR

Affected versions of this package are vulnerable to denial of service when processing specially crafted XLSX files with extreme or sparse declared dimensions. Such files can trigger excessive memory allocation, potentially leading to out-of-memory conditions and application crashes. The patched version introduces safeguards that detect pathological bounding boxes and process sparse sheets safely, preventing excessive memory allocation.