Phpoffice

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 37
    Known Exploited: 0
    1
    Critical Level Threats
    15
    High Level Threats
    15
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-108357

    PhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Service

    Last Modified: Oct 23, 2026
    Published: Oct 22, 2026

    CVE-2026-108359

    PhpSpreadsheet ODS Reader: Unbounded number-rows-repeated → CPU & Memory Exhaustion (DoS)

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-108358

    PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Service

    Last Modified: Oct 23, 2026
    Published: Oct 22, 2026

    CVE-2026-108360

    PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-114404

    PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions

    Last Modified: Oct 22, 2026
    Published: Oct 21, 2026
    Items Per Page
    Phpoffice Vulnerabilities & Security CVEs | CVE-DB