phpoffice/phpspreadsheet
PHPSpreadsheet - Read, Create and Write Spreadsheet documents in PHP - Spreadsheet engine
Security Advisories for phpoffice/phpspreadsheet in packagist
High
21 days ago
PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
packagist
phpoffice/phpspreadsheet
High
21 days ago
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
packagist
phpoffice/phpspreadsheet
High
21 days ago
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
packagist
phpoffice/phpspreadsheet
Critical
2 months ago
PHPSpreadsheet has a patch bypass for CVE-2026-34084
packagist
phpoffice/phpspreadsheet
High
4 months ago
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions
packagist
phpoffice/phpspreadsheet
High
4 months ago
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader
packagist
phpoffice/phpspreadsheet
Critical
4 months ago
PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled
packagist
phpoffice/phpspreadsheet
Moderate
4 months ago
PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer
packagist
phpoffice/phpspreadsheet
Moderate
4 months ago
PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer
packagist
phpoffice/phpspreadsheet
High
12 months ago
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties
packagist
phpoffice/phpspreadsheet
High
over 1 year ago
PhpSpreadsheet allows unauthorized Reflected XSS in Currency.php file
packagist
phpoffice/phpspreadsheet
High
over 1 year ago
PhpSpreadsheet allows unauthorized Reflected XSS in the Accounting.php file
packagist
phpoffice/phpspreadsheet
High
over 1 year ago
PhpSpreadsheet allows unauthorized Reflected XSS in the constructor of the Downloader class
packagist
phpoffice/phpspreadsheet
High
over 1 year ago
PhpSpreadsheet allows unauthorized Reflected XSS in `Convert-Online.php` file
packagist
phpoffice/phpspreadsheet
Potential