Skip to content
OpenAdvisories

Vendor

PHPOffice

35 known vulnerabilities.

Products

PhpSpreadsheet 32 PHPPresentation 2 Math 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-45034 Public exploit

    PhpSpreadsheet: File::prohibitWrappers bypass

    PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.5, CVE-2026-34084 was patched by the helper File::prohibitWrappers. The helper calls parse_url($filename, PHP_URL_SCHEME) and then checks is_string($scheme) && strle…

    PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet Packagist