A vulnerability was found in Spreadsheet::ParseXLSX up to 0.29 on Perl and classified as critical. This issue affects the function XML::Twig. The manipulation of the argument no_xxe leads to xml external entity reference.

The identification of this vulnerability is CVE-2024-23525. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.