{"action":"Upgrade sheets-diff to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0.0.0-0"}],"component":"sheets-diff","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-w5x2-6474-pqp4","id":"tcs_01M5KFCBF9SDJHKCYGKEV95CKJ","modified_at":"2026-10-01T07:45:02.713409416Z","published_at":"2026-09-29T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0317","https://crates.io/crates/sheets-diff","https://rustsec.org/advisories/RUSTSEC-2026-0317.html","https://github.com/forskscope/sheets-diff-rs/commit/fb70d62c88ca906284703c8071e51951c6ab43e2","https://github.com/forskscope/sheets-diff-rs/blob/3.2.0/CHANGELOG.md#320---2026-09-29","https://github.com/tafia/calamine/issues/714"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0317","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0317"}],"summary":"A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process"}