phpoffice/phpspreadsheet Security Advisories | GitStock

high2024-11-18

XmlScanner bypass leads to XXE

GHSA-jw4x-v69f-hh5w · CVE-2024-47873

high2024-10-07

XXE in PHPSpreadsheet's XLSX reader

GHSA-6hwr-6v2f-3m88 · CVE-2024-45293

medium2024-10-07

PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks

GHSA-r8w8-74ww-j4wh · CVE-2024-45292

medium2024-10-07

PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled

GHSA-w9xv-qf98-ccq4 · CVE-2024-45291

high2024-10-07

PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file

GHSA-5gpr-w2p5-6m37 · CVE-2024-45290

medium2024-10-07

PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file

GHSA-v66g-p9x6-v98p · CVE-2024-45060

high2024-08-29

XXE in PHPSpreadsheet encoding is returned

GHSA-ghg6-32f9-2jp7 · CVE-2024-45048

medium2024-08-29

PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information

GHSA-wgmf-q9vr-vww6 · CVE-2024-45046