Browse CVEs

HIGH 7.5 CVE-2026-40863 PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the SpreadsheetML … Phpspreadsheet 1.30.4 / 2.1.16+ Fix from $1,9502026-05-12 HIGH 7.5 CVE-2026-40902 PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5.7.0, the XLSX reader's … Phpspreadsheet 1.30.4 / 2.1.16+ Fix from $1,9502026-05-12 MEDIUM 5.4 CVE-2026-40296 PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatt… Phpspreadsheet 1.30.4 / 2.1.16+ Fix from $1,6002026-05-06 MEDIUM 5.4 CVE-2026-35453 PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3… Phpspreadsheet 1.30.4 / 2.1.16+ Fix from $1,6002026-05-05 CRITICAL 9.8 CVE-2026-34084 PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3… Phpspreadsheet 1.30.3 / 2.1.15+ Fix from $2,3002026-05-05 MEDIUM 6.1 CVE-2025-22131 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the … Phpspreadsheet 1.29.8 / 2.1.7+ Fix from $1,6002025-01-20 MEDIUM 5.4 CVE-2024-56411 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site script… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56412 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to bypass… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56410 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have a cross-site script… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56365 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56366 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56409 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 are vulnerable to unauth… Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 MEDIUM 5.4 CVE-2024-56408 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 have no sanitization in … Phpspreadsheet 1.29.7 / 2.1.6+ Fix from $1,6002025-01-03 HIGH 7.5 CVE-2024-48917 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The `XmlScanner` class has a scan method which should prevent XXE attacks.… Phpspreadsheet 1.29.4 / 2.1.3+ Fix from $1,9502024-11-18 HIGH 7.5 CVE-2024-47873 PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. The XmlScanner class has a scan method which should prevent XXE attacks. H… Phpspreadsheet 1.29.4 / 2.1.3+ Fix from $1,9502024-11-18 HIGH 8.8 CVE-2024-45291 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that links im… Phpspreadsheet 1.29.2 / 2.1.1+ Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-45290 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links m… Phpspreadsheet 1.29.2 / 2.1.1+ Fix from $1,9502024-10-07 MEDIUM 6.1 CVE-2024-45060 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross… Phpspreadsheet 1.29.2 / 2.1.1+ Fix from $1,6002024-10-07 HIGH 7.5 CVE-2024-45293 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XL… Phpspreadsheet 1.29.1 / 2.1.1+ Fix from $1,9502024-10-07 MEDIUM 5.4 CVE-2024-45292 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html` does not sanitize "javascript… Phpspreadsheet 1.29.2 / 2.1.1+ Fix from $1,6002024-10-07 MEDIUM 6.5 CVE-2024-45048 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows… Phpspreadsheet 1.29.1 / 2.2.1+ Fix from $1,6002024-08-28 MEDIUM 5.4 CVE-2024-45046 PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't … Phpspreadsheet 1.29.1 / 2.1.0+ Fix from $1,6002024-08-28 MEDIUM 6.4 CVE-2020-7776 This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by add… Phpspreadsheet 1.16.0+ Fix from $1,6002020-12-09 HIGH 8.8 CVE-2019-12331 PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is … Phpspreadsheet 1.8.0+ Fix from $1,9502019-11-07 HIGH 8.8 CVE-2018-19277EPSS 8% securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file Phpspreadsheet after 1.5.0 Fix from $1,9502018-11-14