| CVE |
Severity |
CVSS |
Risk |
Published |
Description |
Impact |
| CVE-2026-40902 |
high |
7.5 |
7.5 |
28d ago |
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions |
|
| CVE-2026-40863 |
high |
7.5 |
7.5 |
28d ago |
PhpSpreadsheet has CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader |
|
| CVE-2026-40296 |
medium |
5.4 |
5.4 |
29d ago |
PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer |
|
| CVE-2026-35453 |
medium |
5.4 |
5.4 |
29d ago |
PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer |
|