Packagist/phpoffice/phpspreadsheet CVE-2026-45034: critical 9.2, EPSS 0.46%
PHPSpreadsheet has a patch bypass for CVE-2026-34084
Action: Upgrade phpoffice/phpspreadsheet to 1.30.5 or later.
composer require phpoffice/phpspreadsheet:1.30.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.30.5 | - |
Fixed versions
| 1.30.5 |
Sources
- osv: GHSA-87m4-826x-3crx
- nvd: CVE-2026-45034
- https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-87m4-826x-3crx
- https://github.com/PHPOffice/PhpSpreadsheet
- https://github.com/advisories/GHSA-q4q6-r8wh-5cgh
CVE-2026-45034 · published · modified · JSON