[MEDIUM] CVE-2021-41270: Prevent CSV Injection via formulas

PKSA-s1hc-69wj-fhpp CVE-2021-41270 GHSA-2xhg-w2g5-w95x

Affected version: >=4.1.0,<4.2.0|>=4.2.0,<4.3.0|>=4.3.0,<4.4.0|>=4.4.0,<4.4.35|>=5.0.0,<5.1.0|>=5.1.0,<5.2.0|>=5.2.0,<5.3.0|>=5.3.0,<5.3.12

Reported by:
GitHub, FriendsOfPHP/security-advisories

XML decoding attack vector through external entities

PKSA-ft85-yyfg-zynf

Affected version: >=2.0.0,<2.0.11

Reported by:
FriendsOfPHP/security-advisories