phpoffice/phpspreadsheet
PHPSpreadsheet - Read, Create and Write Spreadsheet documents in PHP - Spreadsheet engine
Security Advisories for phpoffice/phpspreadsheet in packagist
High
3 months ago
PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
packagist
phpoffice/phpspreadsheet
High
3 months ago
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
packagist
phpoffice/phpspreadsheet
High
3 months ago
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
packagist
phpoffice/phpspreadsheet
Critical
4 months ago
PHPSpreadsheet has a patch bypass for CVE-2026-34084
packagist
phpoffice/phpspreadsheet
High
6 months ago
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions
packagist
phpoffice/phpspreadsheet
High
6 months ago
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader
packagist
phpoffice/phpspreadsheet
Critical
6 months ago
PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled
packagist
phpoffice/phpspreadsheet
Moderate
6 months ago
PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer
packagist
phpoffice/phpspreadsheet
Moderate
6 months ago
PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer
packagist
phpoffice/phpspreadsheet
High
about 1 year ago
PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser
packagist
phpoffice/phpspreadsheet
Moderate
over 1 year ago
PhpSpreadsheet allows bypassing of XSS sanitizer using the javascript protocol and special characters
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
over 1 year ago
Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
almost 2 years ago
PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
almost 2 years ago
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
almost 2 years ago
PhpSpreadsheet has a Cross-Site Scripting (XSS) vulnerability in custom properties
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
PhpSpreadsheet allows unauthorized Reflected XSS in Currency.php file
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
PhpSpreadsheet allows unauthorized Reflected XSS in the Accounting.php file
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
PhpSpreadsheet allows unauthorized Reflected XSS in the constructor of the Downloader class
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
PhpSpreadsheet allows unauthorized Reflected XSS in `Convert-Online.php` file
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
XXE in PHPSpreadsheet's XLSX reader
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 2 years ago
XmlScanner bypass leads to XXE
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
about 2 years ago
XXE in PHPSpreadsheet's XLSX reader
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
about 2 years ago
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
about 2 years ago
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
about 2 years ago
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
about 2 years ago
PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Potential
High
about 2 years ago
XXE in PHPSpreadsheet encoding is returned
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
about 2 years ago
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
Moderate
over 5 years ago
Cross-site scripting in phpoffice/phpspreadsheet
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 7 years ago
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet
High
almost 7 years ago
XXE in PHPSpreadsheet due to encoding issue
packagist
phpoffice/phpexcel, phpoffice/phpspreadsheet