Wikimedia Foundation Mediawiki - DataTransfer Extension

• CVE-2026-100242 High 7.5 DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion) 0.4%
• CVE-2025-23081 Medium 6.1 Various security vulnerabilities in Extension:DataTransfer 0.2%