Hi!
I just found Extension:DataTransfer to be affected by CVE-2025-54370
> composer audit Found 1 security vulnerability advisory affecting 1 package: +-------------------+----------------------------------------------------------------------------------+ | Package | phpoffice/phpspreadsheet | | Severity | high | | CVE | CVE-2025-54370 | | Title | PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML | | | document in the browser | | URL | https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-rx7m-68vc-p | | | pxh | | Affected versions | <1.30.0|>=2.0.0,<2.1.0|>=2.1.0,<2.1.12|>=2.2.0,<2.3.0|>=2.3.0,<2.4.0|>=3.0.0,<3. | | | 10.0|>=4.0.0,<5.0.0 | | Reported at | 2025-08-03T01:06:00+00:00 | +-------------------+----------------------------------------------------------------------------------+
Will provide a patch.