[■] Librería
phpoffice/phpspreadsheet
35 expedientes en el radar
[■] Registro
Vulnerabilidades (35)
-
— Media
CVE-2026-108360: autorización incorrecta en phpoffice/phpspreadsheet
CVE-2026-108360 · GHSA-2PHH-27FW-Q4GC
T−17d 27 oct. 2026
-
— Alta
CVE-2026-108359: consumo de recursos sin control en phpoffice/phpspreadsheet
CVE-2026-108359 · GHSA-J2W7-387V-M2RQ
T−17d 27 oct. 2026
-
— Alta
CVE-2026-108358: entidades externas XML (XXE) en phpoffice/phpspreadsheet
CVE-2026-108358 · GHSA-3X94-M842-937C
T−17d 27 oct. 2026
-
— Alta
CVE-2026-108357: entidades externas XML (XXE) en phpoffice/phpspreadsheet
CVE-2026-108357 · GHSA-RXJ4-H86G-25GC
T−17d 27 oct. 2026
-
— Alta
CVE-2026-59933: consumo de recursos sin control en phpoffice/phpspreadsheet
CVE-2026-59933 · GHSA-XH5M-36R6-47M3
T−113d 23 jul. 2026
-
— Alta
CVE-2026-59932: consumo de recursos sin control en phpoffice/phpspreadsheet
CVE-2026-59932 · GHSA-2MRG-GJXQ-2GVR
T−113d 23 jul. 2026
-
— Alta
CVE-2026-59931: falsificación de peticiones del servidor (SSRF) en phpoffice/phpspreadsheet
CVE-2026-59931 · GHSA-6HQ5-7373-42RG
T−113d 23 jul. 2026
-
— Crít.
CVE-2026-45034: deserialización de datos no fiables en phpoffice/phpspreadsheet
CVE-2026-45034 · GHSA-87M4-826X-3CRX
T−158d 9 jun. 2026
-
— Alta
CVE-2026-40902: consumo de recursos sin control en phpoffice/phpspreadsheet
CVE-2026-40902 · GHSA-7C6M-4442-2X6M
T−198d 29 abr. 2026
-
— Alta
CVE-2026-40863: consumo de recursos sin control en phpoffice/phpspreadsheet
CVE-2026-40863 · GHSA-84WQ-86V6-X5J6
T−198d 29 abr. 2026
-
— Crít.
CVE-2026-34084: deserialización de datos no fiables en phpoffice/phpspreadsheet
CVE-2026-34084 · GHSA-Q4Q6-R8WH-5CGH
T−198d 29 abr. 2026
-
— Media
CVE-2026-40296: cross-site scripting (XSS) en phpoffice/phpspreadsheet
CVE-2026-40296 · GHSA-HRMW-QPRP-WGMC
T−199d 29 abr. 2026
-
— Media
CVE-2026-35453: cross-site scripting (XSS) en phpoffice/phpspreadsheet
CVE-2026-35453 · GHSA-6WPP-88CP-7Q68
T−199d 29 abr. 2026
-
— Alta
CVE-2025-54370: falsificación de peticiones del servidor (SSRF) en phpoffice/phpspreadsheet
CVE-2025-54370 · GHSA-RX7M-68VC-PPXH
T−445d 25 ago. 2025
-
— Media
CVE-2025-23210: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2025-23210 · GHSA-R57H-547H-W24F
T−648d 3 feb. 2025
-
— Media
CVE-2025-22131: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2025-22131 · GHSA-79XX-VF93-P7CX
T−661d 21 ene. 2025
-
— Media
CVE-2024-56412: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56412 · GHSA-Q9JV-MM3R-J47R
T−679d 3 ene. 2025
-
— Media
CVE-2024-56411: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56411 · GHSA-HWCP-2H35-P66W
T−679d 3 ene. 2025
-
— Media
CVE-2024-56410: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56410 · GHSA-WV23-996V-Q229
T−679d 3 ene. 2025
-
— Alta
CVE-2024-56409: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56409 · GHSA-J2XG-CJCX-4677
T−679d 3 ene. 2025
-
— Alta
CVE-2024-56366: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56366 · GHSA-C6FV-7VH8-2RHR
T−679d 3 ene. 2025
-
— Alta
CVE-2024-56365: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56365 · GHSA-JMPX-686V-C3WX
T−679d 3 ene. 2025
-
— Alta
CVE-2024-56408: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-56408 · GHSA-X88G-H956-M5XG
T−679d 3 ene. 2025
-
— Alta
CVE-2024-48917: entidades externas XML (XXE) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-48917 · GHSA-7CC9-J4MV-VCJP
T−725d 18 nov. 2024
-
— Alta
CVE-2024-47873: entidades externas XML (XXE) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-47873 · GHSA-JW4X-V69F-HH5W
T−725d 18 nov. 2024
-
— Media
CVE-2024-45292: cross-site scripting (XSS) en phpoffice/phpexcel y phpoffice/phpspreadsheet
CVE-2024-45292 · GHSA-R8W8-74WW-J4WH
T−767d 7 oct. 2024
-
— Media
CVE-2024-45291: recorrido de rutas (path traversal) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-45291 · GHSA-W9XV-QF98-CCQ4
T−767d 7 oct. 2024
-
— Alta
CVE-2024-45290: vulnerabilidad en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-45290 · GHSA-5GPR-W2P5-6M37
T−767d 7 oct. 2024
-
— Media
CVE-2024-45060: cross-site scripting (XSS) en phpoffice/phpspreadsheet y phpoffice/phpexcel
CVE-2024-45060 · GHSA-V66G-P9X6-V98P
T−767d 7 oct. 2024
-
7,5 Alta
CVE-2024-45293 · GHSA-6HWR-6V2F-3M88
T−768d 7 oct. 2024