This is an automated email from the ASF dual-hosted git repository. pjfanning pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/poi.git
commit e1a98ee6a8af5bfaf6ed9104020c2ab4adc49bbb Author: PJ Fanning <[email protected]> AuthorDate: Mon May 25 22:06:09 2026 +0100 Update security.html --- content/security.html | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/content/security.html b/content/security.html index 1f39c337e4..653a52d6fd 100644 --- a/content/security.html +++ b/content/security.html @@ -254,9 +254,12 @@ document.write("Last Published: " + document.lastModified); <li> <strong>OutOfMemoryErrors</strong> <br> - Memory usage can be high, potentially causing OutOfMemoryErrors. Malicious actors can create files designed to exploit parsers and generate large arrays. + Malicious actors can create files designed to exploit parsers and generate large arrays. Legacy formats (xls, doc, ppt, etc.) are particularly vulnerable, though all formats have potential issues. <br> + When you parse files with Apache POI, you can get OutOfMemoryErrors or other exceptions or errors + related to the index being out of bounds or issues like int overflows. + <br> Apache POI includes checks to detect suspicious values that may indicate malicious content, but these checks should not be considered comprehensive. <br> We strongly recommend never parsing files from untrusted or unknown sources. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
