phpoffice/phpspreadsheet Security Advisories for 1.26.0 (2)
-
[HIGH] XXE in PHPSpreadsheet encoding is returned
PKSA-xp7t-fbrb-qjv4 CVE-2024-45048 GHSA-ghg6-32f9-2jp7
Affected version: >=2.0.0,<2.1.1|>=2.2.0,<2.2.1|<1.29.1
Reported by:
GitHub -
[MEDIUM] PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information
PKSA-m4hk-rk8p-4t5p CVE-2024-45046 GHSA-wgmf-q9vr-vww6
Affected version: <1.29.1|>=2.0.0,<2.1.0
Reported by:
GitHub