Package · Packagist

phpoffice/phpspreadsheet

35 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2018-19277 Public exploit

XXE in PHPSpreadsheet due to encoding issue

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

phpoffice/phpspreadsheet phpoffice/phpexcel Packagist

Nov 14, 2018