Known Vulnerabilities for Phpspreadsheet by Phpspreadsheet Project
Listed below are 3 of the newest known vulnerabilities associated with "Phpspreadsheet" by "Phpspreadsheet Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45034 json | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.5, CVE-2026-34084 was patched b... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-40902 json | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40863 json | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.4, 2.1.16, 2.4.5, 3.10.5, and 5... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40296 json | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escapi... | Not Provided | 2026-05-06 | 2026-05-07 |
| CVE-2026-35453 json | PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, ... | Not Provided | 2026-05-05 | 2026-05-06 |
| CVE-2026-34084 json | PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, ... | Not Provided | 2026-05-05 | 2026-05-05 |
| CVE-2020-7776 json | This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output f... | 6.4 - MEDIUM | 2020-12-09 | 2021-01-19 |
| CVE-2019-12331 json | PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if somet... | 8.8 - HIGH | 2019-11-07 | 2020-02-10 |
| CVE-2018-19277 json | securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding ... | 8.8 - HIGH | 2018-11-14 | 2022-04-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.9.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.8.2 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.8.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.8.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.7.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.6.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.5.2 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.5.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.5.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.4.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.4.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.3.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.3.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.2.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.2.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.16.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.15.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.14.1 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.14.0 | |||
| Application | Phpspreadsheet Project | Phpspreadsheet | 1.13.0 |