`phpoffice/phpspreadsheet`

Ecosystem:
packagist

Package URL:
pkg:composer/phpoffice/phpspreadsheet

Total PRs:
353 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
198 repositories

Unique Repos (30 days):
1 repository

Security Advisories

XXE in PHPSpreadsheet's XLSX reader

GHSA-6hwr-6v2f-3m88 CVE-2024-45293 HIGH published almost 2 years ago • updated about 5 hours ago

### Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure,...

XXE in PHPSpreadsheet due to encoding issue

GHSA-xcrg-29h7-h4cj CVE-2018-19277 HIGH published over 6 years ago • updated about 6 hours ago

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

GHSA-q4q6-r8wh-5cgh CVE-2026-34084 CRITICAL published 2 months ago • updated 3 days ago

The usage of `is_file`, used to verify if the `$filename` is indeed an actual file, by all(?) `Reader` implementations (inside the helper function ...

Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet

GHSA-79xx-vf93-p7cx CVE-2025-22131 MODERATE published over 1 year ago • updated about 6 hours ago

### Summary The researcher discovered zero-day vulnerability Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file in...

PhpSpreadsheet allows bypass XSS sanitizer using the javascript protocol and special characters

GHSA-q9jv-mm3r-j47r CVE-2024-56412 MODERATE published over 1 year ago • updated about 22 hours ago

# Bypass XSS sanitizer using the javascript protocol and special characters **Product**: Phpspreadsheet **Version**: version 3.6.0 **CWE-ID**: CWE...

View all 28 advisories

Recent PRs

RSS Feed

build(deps): bump the composer group across 1 directory with 8 updates

REChain-Network-Solutions/AIPlatform #422

4.5.0 → 5.7.0 Major PR

Closed about 1 month ago 1 comment

Bump phpoffice/phpspreadsheet from 1.30.1 to 1.30.4

ibauk/sm3 #39

1.30.1 → 1.30.4 Patch PR

Closed 2 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.30.0 to 1.30.4

alialobidm/i-educar #16

1.30.0 → 1.30.4 Patch PR

Open 2 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.30.0 to 1.30.4 in /wordpress/wp-content/themes/les-verts

grueneschweiz/2018.gruene.ch #262

1.30.0 → 1.30.4 Patch PR

Closed 2 months ago 1 comment

Bump the composer group across 1 directory with 6 updates

mahmoud2001858833/order #27

5.0.0 → 5.7.0 Minor PR

Open 2 months ago 1 comment

chore(deps): Bump phpoffice/phpspreadsheet from 2.4.0 to 2.4.5

UN-OCHA/iasc8 #1218

2.4.0 → 2.4.5 Patch PR

Open 2 months ago 2 comments

Bump phpoffice/phpspreadsheet from 2.1.0 to 2.1.16

Coricap-RIPA/ripa-backend-one #5

2.1.0 → 2.1.16 Patch PR

Closed 2 months ago 1 comment

Update phpoffice/phpspreadsheet requirement from ^2.0 to ^5.7

thermiteplasma/loom #5

^2.0 → ^5.7

Open 3 months ago 1 comment

chore(deps)(deps): bump phpoffice/phpspreadsheet from 5.5.0 to 5.7.0 in /backend

roldaobatista/sistema #35

5.5.0 → 5.7.0 Minor PR

Closed 3 months ago 3 comments

chore(deps): bump phpoffice/phpspreadsheet from 5.5.0 to 5.7.0

Willgunter/openemr #21

5.5.0 → 5.7.0 Minor PR

Open 3 months ago 1 comment

Chore(deps): Bump phpoffice/phpspreadsheet from 5.5.0 to 5.6.0

nextcloud/forms #3282

5.5.0 → 5.6.0 Minor PR

Open 3 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.6.0 to 1.30.0

casudinlix/HR #1

1.6.0 → 1.30.0 Minor PR

Closed 3 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.29.2 to 1.30.2

muhammadyunus1072/hr-exata-group #2

1.29.2 → 1.30.2 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump phpoffice/phpspreadsheet from 5.4.0 to 5.5.0

azkuang/openemr #9

5.4.0 → 5.5.0 Minor PR

Open 4 months ago 1 comment

Bump phpoffice/phpspreadsheet from 5.2.0 to 5.4.0

heritage-africa/omni365-forms-build #25

5.2.0 → 5.4.0 Minor PR

Open 6 months ago 1 comment

Update phpoffice/phpspreadsheet requirement from ^5.3 to ^5.4

MammothPHP/WoollyM #94

^5.3 → ^5.4

Closed 6 months ago 1 comment

chore(deps): bump phpoffice/phpspreadsheet from 5.3.0 to 5.4.0

demos-europe/demosplan-core #5729

5.3.0 → 5.4.0 Minor PR

Open 6 months ago 2 comments

Bump phpoffice/phpspreadsheet from 1.29.12 to 1.30.1

SilvioRamirez/thfundasalud #1

1.29.12 → 1.30.1 Minor PR

Closed 6 months ago 1 comment

Bump phpoffice/phpspreadsheet from 3.9.1 to 3.10.0

szentjozsefhackathon/szentiras.eu #269

3.9.1 → 3.10.0 Minor PR

Closed 6 months ago 1 comment

Bump phpoffice/phpspreadsheet from 4.3.1 to 5.3.0

orthagh/glpi #850

4.3.1 → 5.3.0 Major PR

Closed 7 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.29.0 to 5.3.0

rondo-verlag/song-manager #55

1.29.0 → 5.3.0 Major PR

Closed 7 months ago 1 comment

Bump phpoffice/phpspreadsheet from 5.2.0 to 5.3.0

heritage-africa/omni365-forms-build #11

5.2.0 → 5.3.0 Minor PR

Closed 8 months ago 2 comments

build(deps): bump the all group across 1 directory with 10 updates

TegarAditya/madyotomo #192

5.0.0 → 5.2.0 Minor PR

Closed 8 months ago 1 comment

Chore(deps): Bump phpoffice/phpspreadsheet from 5.1.0 to 5.2.0

nextcloud/forms #3020

5.1.0 → 5.2.0 Minor PR

Open 8 months ago 3 comments

Bump phpoffice/phpspreadsheet from 5.1.0 to 5.2.0

MarijnDoeve/TijdVoorDeTest #54

5.1.0 → 5.2.0 Minor PR

Open 9 months ago 1 comment

build(deps): bump the minor group in /backend with 3 updates

algirdasc/expensave #311

5.1.0 → 5.2.0 Minor PR

Closed 9 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

spechycom/spechy-dealership #7

1.29.10 → 1.30.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 3.9.1 to 3.10.0

Indicia-Team/warehouse #576

3.9.1 → 3.10.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 4.3.1 to 5.0.0 in /www

Intermesh/groupoffice #1349

4.3.1 → 5.0.0 Major PR

Open 9 months ago

Bump the composer group across 1 directory with 2 updates

HandyKnox/mautic-marketing #2

4.2.0 → 4.5.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

aldairg-dev/StudentChoice #70

1.29.10 → 1.30.0 Minor PR

Open 9 months ago

build(deps): Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

drorganvidez/evidentia #160

1.29.10 → 1.30.0 Minor PR

Open 9 months ago

build(deps-dev): bump phpoffice/phpspreadsheet from 4.5.0 to 5.0.0 in the composer group across 1 directory

lion-packages/spreadsheet #39

4.5.0 → 5.0.0 Major PR

Open 9 months ago

build(deps-dev): update phpoffice/phpspreadsheet requirement from ^2.2 || ^4.0 to ^2.2 || ^4.0 || ^5.0

lion-packages/spreadsheet #36

^2.2 || ^4.0 → ^2.2 || ^4.0 || ^5.0

Closed 9 months ago 1 comment

Update phpoffice/phpspreadsheet requirement from ^1.29 to ^5.1 in /php-symfony-neuron

cf-toolsuite/tanzu-genai-showcase #48

^1.29 → ^5.1

Closed 9 months ago 2 comments

Bump phpoffice/phpspreadsheet from 4.0.0 to 5.1.0

ajithkumarkannankmkd95/glpi #121

4.0.0 → 5.1.0 Major PR

Closed 9 months ago 1 comment

Bump phpoffice/phpspreadsheet from 1.29.0 to 1.30.0

greatsami/multi-vendors-store #3

1.29.0 → 1.30.0 Minor PR

Merged 9 months ago

Update phpoffice/phpspreadsheet requirement from ^2.2 to ^5.1

lucasdominguess/crud_de_usuarios_php_slim4 #40

^2.2 → ^5.1

Open 9 months ago

Bump phpoffice/phpspreadsheet from 2.3.8 to 5.1.0

Ecodev/my-ichtus #172

2.3.8 → 5.1.0 Major PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 4.3.1 to 5.0.0

yoichi-kaneko/misc_simulate #91

4.3.1 → 5.0.0 Major PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

erfantkerfan/bank #94

1.29.10 → 1.30.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

arbory/arbory #375

1.29.10 → 1.30.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 4.4.0 to 5.0.0

tainacan/tainacan #975

4.4.0 → 5.0.0 Major PR

Open 9 months ago 3 comments

chore(deps): bump phpoffice/phpspreadsheet from 1.29.9 to 1.30.0 in /web/app/plugins/e-addons-dev

frocentric/wordpress #1285

1.29.9 → 1.30.0 Minor PR

Open 9 months ago

Bump phpoffice/phpspreadsheet from 1.29.0 to 1.30.0

keanbarz/peppcodes #1

1.29.0 → 1.30.0 Minor PR

Merged 9 months ago

Update phpoffice/phpspreadsheet requirement from ^5.0 to ^5.1

Zopkit/GLPI #18

^5.0 → ^5.1

Open 9 months ago

Bump phpoffice/phpspreadsheet from 1.29.10 to 1.30.0

ZTL-ARTCC/Current_Website #794

1.29.10 → 1.30.0 Minor PR

Merged 9 months ago

Bump phpoffice/phpspreadsheet from 1.12.0 to 1.30.0

yongyutTG/PcDetail #2

1.12.0 → 1.30.0 Minor PR

Open 10 months ago

Bump phpoffice/phpspreadsheet from 1.18.0 to 1.30.0

cultuurnet/udb3-backend #2099

1.18.0 → 1.30.0 Minor PR

Closed 10 months ago 4 comments

build(deps): bump the all group across 1 directory with 8 updates

TegarAditya/madyotomo #190

5.0.0 → 5.1.0 Minor PR

Closed 10 months ago 2 comments

Package Details

Name:	`phpoffice/phpspreadsheet`
Ecosystem:	packagist
PURL Type:	composer
Package URL:	`pkg:composer/phpoffice/phpspreadsheet`
JSON API:	View JSON

Security Advisories

28

Active advisories

CRITICAL 2

HIGH 14

MODERATE 12

View All composer Advisories

Package Information

Description:

PHPSpreadsheet - Read, Create and Write Spreadsheet documents in PHP - Spreadsheet engine

Repository:	https://github.com/PHPOffice/PhpSpreadsheet
Homepage:	https://github.com/PHPOffice/PhpSpreadsheet
Latest Release:	`4.3.1` about 1 year ago
Dependent Repos:	20,090
Dependent Packages:	1,063
Downloads:	236,155,896
Ranking:	Top 0.0638% by dependent repos Top 0.0389% by downloads Top 0.0406% by dependent pkgs

PR Status

Open 138 (39.1%)

Merged 64 (18.1%)

Closed 129 (36.5%)

PR Types

Major 76 (21.5%)

Minor 192 (54.4%)

Patch 42 (11.9%)