{"id":2840547,"name":"openpyxl","ecosystem":"pypi","description":"A Python library to read/write Excel 2010 xlsx/xlsm files","homepage":"https://openpyxl.readthedocs.io","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":null,"keywords_array":[],"namespace":null,"versions_count":96,"first_release_published_at":"2010-08-11T18:19:43.000Z","latest_release_published_at":"2024-06-28T14:03:41.000Z","latest_release_number":"3.1.5","last_synced_at":"2026-10-12T11:27:40.461Z","created_at":"2022-04-10T11:57:16.291Z","updated_at":"2026-10-12T13:19:46.961Z","registry_url":"https://pypi.org/project/openpyxl/","install_command":"pip install openpyxl --index-url https://pypi.org/simple","documentation_url":"https://openpyxl.readthedocs.io/en/stable/","metadata":{"funding":null,"documentation":"https://openpyxl.readthedocs.io/en/stable/","classifiers":["Development Status :: 5 - Production/Stable","License :: OSI Approved :: MIT License","Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX","Programming Language :: Python","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.6","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9"],"normalized_name":"openpyxl","project_status":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-10-08T09:01:20.305Z","dependent_packages_count":2742,"downloads":282967374,"downloads_period":"last-month","dependent_repos_count":39804,"rankings":{"downloads":0.016140658502183575,"dependent_repos_count":0.033198399873809396,"dependent_packages_count":0.010454744711641633,"stargazers_count":null,"forks_count":null,"docker_downloads_count":0.053741056149315763,"average":0.02838371480923759},"purl":"pkg:pypi/openpyxl","advisories":[{"uuid":"GSA_kwCzR0hTQS1jaHFmLWh4NzktZ3hjNs4AAb8R","url":"https://github.com/advisories/GHSA-chqf-hx79-gxc6","title":"Improper Restriction of XML External Entity Reference in Openpyxl","description":"Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-05-17T02:58:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.4,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:N/SA:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-5992","https://bitbucket.org/openpyxl/openpyxl/commits/3b4905f428e1","https://bitbucket.org/openpyxl/openpyxl/issues/749","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854442","http://www.openwall.com/lists/oss-security/2017/02/07/5","https://foss.heptapod.net/openpyxl/openpyxl/-/commit/7fe678fd89fd","https://foss.heptapod.net/openpyxl/openpyxl/-/issues/749","https://github.com/advisories/GHSA-chqf-hx79-gxc6","https://github.com/pypa/advisory-database/tree/main/vulns/openpyxl/PYSEC-2017-48.yaml"],"source_kind":"github","identifiers":["GHSA-chqf-hx79-gxc6","CVE-2017-5992"],"repository_url":"https://bitbucket.org/openpyxl/openpyxl","blast_radius":29.439530992429486,"created_at":"2022-12-21T16:12:15.365Z","updated_at":"2026-10-12T11:18:14.453Z","epss_percentage":0.01159,"epss_percentile":0.65717,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jaHFmLWh4NzktZ3hjNs4AAb8R","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jaHFmLWh4NzktZ3hjNs4AAb8R","packages":[{"ecosystem":"pypi","package_name":"openpyxl","versions":[{"first_patched_version":"2.4.2","vulnerable_version_range":"\u003c= 2.4.1"}],"purl":"pkg:pypi/openpyxl","statistics":{"dependent_packages_count":2742,"dependent_repos_count":39804,"downloads":282967374,"downloads_period":"last-month"},"affected_versions":["1.1.0","1.1.5","1.1.6","1.1.7","1.2.3","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.6.1","1.6.2","1.7.0","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","2.0.2","2.0.3","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.1"],"unaffected_versions":["2.4.2","2.4.3","2.4.4","2.4.5","2.4.7","2.4.8","2.4.9","2.4.10","2.4.11","2.5.0","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.5.7","2.5.8","2.5.9","2.5.10","2.5.11","2.5.12","2.5.14","2.6.0","2.6.0a1","2.6.0b1","2.6.1","2.6.2","2.6.3","2.6.4","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.5","3.0.6","3.0.7","3.0.9","3.0.10","3.1.0","3.1.1","3.1.2","3.1.3","3.1.4","3.1.5","3.2.0b1"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jaHFmLWh4NzktZ3hjNs4AAb8R/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/openpyxl","docker_dependents_count":2157,"docker_downloads_count":1483925558,"usage_url":"https://repos.ecosyste.ms/usage/pypi/openpyxl","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/openpyxl/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/openpyxl/codemeta","maintainers":[{"uuid":"CharlieX","login":"CharlieX","name":null,"email":null,"url":null,"packages_count":3,"html_url":"https://pypi.org/user/CharlieX/","role":null,"created_at":"2023-01-10T21:06:10.057Z","updated_at":"2023-01-10T21:06:10.057Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/CharlieX/packages"},{"uuid":"eric.gazoni","login":"eric.gazoni","name":null,"email":null,"url":null,"packages_count":11,"html_url":"https://pypi.org/user/eric.gazoni/","role":null,"created_at":"2023-01-10T21:06:10.075Z","updated_at":"2023-01-10T21:06:10.075Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/eric.gazoni/packages"}]}