Known vulnerabilities in PhpSpreadsheet 2.1.17
Vendor:
PHPOffice
Software:
PhpSpreadsheet
Version:
2.1.17
Software CPE:
cpe:2.3:a:phpoffice:phpspreadsheet:*:*:*:*:*:*:*:*
Website:
https://github.com/PHPOffice
Total vulnerabilities:
3
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
5.9.0
5.8.1
3.10.7
2.4.7
2.1.18
1.30.6
5.8.0
3.10.6
2.4.6
2.1.17
1.30.5
5.7.0
3.10.5
2.4.5
2.1.16
1.30.4
5.6.0
3.10.4
2.4.4
2.1.15
1.30.3
5.5.0
5.4.0
3.10.3
2.4.3
2.1.14
1.30.2
5.3.0
3.10.2
2.4.2
5.2.0
2.1.13
1.30.1
5.1.0
3.10.1
2.4.1
5.0.0
3.10.0
2.4.0
2.1.12
1.30.0
4.5.0
3.9.3
2.3.10
2.1.11
1.29.12
4.4.0
3.9.2
2.3.9
2.1.10
1.29.11
4.3.1
4.3.0
4.2.0
4.1.0
4.0.0
3.9.1
2.3.8
2.1.9
1.29.10
3.9.0
2.3.7
2.1.8
1.29.9
3.8.0
2.3.6
2.1.7
1.29.8
3.7.0
2.3.5
2.1.6
1.29.7
3.6.0
2.3.4
2.1.5
1.29.6
3.5.0
2.3.3
2.1.4
1.29.5
3.4.0
2.3.2
2.3.1
2.1.3
2.1.2
1.29.4
3.3.0
2.3.0
2.1.1
1.29.2
1.29.1
2.2.2
2.2.1
2.2.0
2.1.0
2.0.0
1.29.0
1.28.0
1.27.1
1.27.0
1.26.0
1.25.2
1.25.1
1.25.0
1.24.1
1.24.0
1.23.0
1.22.0
1.21.0
1.20.0
1.19.0
1.18.0
1.17.1
1.17.0
1.16.0
1.15.0
1.14.1
1.14.0
1.13.0
1.12.0
1.11.0
1.10.1
1.10.0
1.9.0
1.8.2
1.8.1
1.8.0
1.7.0
1.6.0
1.5.2
1.5.1
1.5.0
1.4.1
1.4.0
1.3.1
1.3.0
1.2.1
1.2.0
1.1.0
1.0.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138424 - Server-Side Request Forgery (SSRF) CVE-2026-59931 |
CWE-918 | Medium | 1.30.6, 2.1.18, 2.4.7, 3.10.7, 5.8.1 | 20.07.2026 |
SB2026072021 |
||
| #VU138423 - Resource exhaustion CVE-2026-59932 |
CWE-400 | Medium | 1.30.6, 2.1.18, 2.4.7, 3.10.7, 5.8.1 | 20.07.2026 |
SB2026072021 |
||
| #VU138422 - Resource exhaustion CVE-2026-59933 |
CWE-400 | Medium | 1.30.6, 2.1.18, 2.4.7, 3.10.7, 5.8.1 | 20.07.2026 |
SB2026072021 |