CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

textproc/xlsxio 0.2.36

C library for reading and writing .xlsx files

1
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 0.2.36
Upstream
Higher version available: 0.2.37
Last update
to 0.2.36 · 37732cd0c4
Quarterly
2026Q4: 0.2.36
WWW
https://github.com/brechtsanders/xlsxio
Links
cgit · VuXML

Install

Package
# pkg install xlsxio
installs 0.2.36 from latest; from quarterly (2026Q4) 0.2.36
Port
# cd /usr/ports/textproc/xlsxio && make install clean
Size
43 KiB download · 184 KiB installed
Depends on
archivers/minizip 1.3.2_1, textproc/expat2 2.9.0
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.2.360.2.36–
FreeBSD 150.2.360.2.36–
FreeBSD 140.2.360.2.360.2.36

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.2.360.2.36–
FreeBSD 140.2.360.2.360.2.36

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 0.2.36 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-1106006.82026-10-14xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attac…

VuXML only (0)

Listed in VuXML, the packaged version 0.2.36 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (5)

Gleb Popov (arrowd) · 0.2.36
textproc/xlsxio: Fix building with CMake 4

Approved by:	portmgr (fixit blanket)
37732cd0c4
Po-Chuan Hsieh (sunpoet) · 0.2.36
textproc/xlsxio: Update to 0.2.36

Changes:	https://github.com/brechtsanders/xlsxio/releases
bd54ca7952
Po-Chuan Hsieh (sunpoet) · 0.2.35_1
textproc/xlsxio: Remove USES=pathfix
f6ac967e67
Po-Chuan Hsieh (sunpoet) · 0.2.35_1
textproc/xlsxio: Fix cmake files installation

- Bump PORTREVISION for package change
30787d9c73
Po-Chuan Hsieh (sunpoet) · 0.2.35
textproc/xlsxio: Add xlsxio 0.2.35

XLSX I/O aims to provide a C library for reading and writing .xlsx files. The
.xlsx file format is the native format used by Microsoft(R) Excel(TM) since
version 2007.
bce2cca196