{"action":"Upgrade phpoffice/phpexcel to 1.8.0 or later.","affected":[{"fixed":"1.8.0","introduced":"0"}],"component":"phpoffice/phpexcel","cve_ids":["CVE-2014-2054"],"ecosystem":"Packagist","epss":0.01538,"exploited":false,"fixed_versions":["1.8.0"],"ghsa_id":"GHSA-28rm-rj57-qjpv","id":"tcs_01M5KERR6B94EAZYZH8W15HMJX","modified_at":"2025-03-31T13:54:26.263999Z","published_at":"2022-05-17T04:42:46Z","references":["https://osv.dev/vulnerability/GHSA-28rm-rj57-qjpv","https://nvd.nist.gov/vuln/detail/CVE-2014-2054","https://github.com/PHPOffice/PHPExcel/commit/e04bf7ed091b0a72d028eacf26d770b485d4e897","https://github.com/PHPOffice/PHPExcel","https://github.com/PHPOffice/PHPExcel/blob/2b601574975acfb9d4378a788ed5f2b747958095/changelog.txt#L120","https://github.com/PHPOffice/PHPExcel/blob/develop/changelog.txt","http://owncloud.org/about/security/advisories/oC-SA-2014-006"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-28rm-rj57-qjpv","url":"https://osv.dev/vulnerability/GHSA-28rm-rj57-qjpv"}],"summary":"PHPExcel vulnerable to XXE attacks through libxml"}