PhpSpreadsheet — Vulnerabilities & Security Advisories 28

This page aggregates vulnerabilities for PhpSpreadsheet, an open-source PHP library for reading and writing office documents, focusing primarily on security weaknesses in its parsing and serialization logic. The collection covers documented security flaws, including deserialization issues, XML injection, and arbitrary code execution risks, spanning releases from earlier minor versions through the latest stable build. Here you can track the vendor’s published security advisories, analyze the recurring weakness classes affecting spreadsheet parsing, and review the product’s full vulnerability history. The entries are organized by severity and affected versions, enabling users to identify which specific releases require immediate patching. Each record includes the affected component, a concise description of the flaw, and references to the official advisory, providing a clear audit trail for compliance and risk assessment.