The Wikimedia Foundation Mediawiki - DataTransfer Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation Mediawiki - DataTransfer Extension: 1 record(s), with affected versions and fixes.

CVE-2026-100242 High · 7.5 CWE-400 Sep 29, 2026

DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0.