{"action":"Upgrade phpoffice/phpspreadsheet to 1.29.1 or later.","affected":[{"fixed":"2.3.0","introduced":"2.2.0"},{"fixed":"1.29.1","introduced":"0"},{"fixed":"2.1.1","introduced":"2.0.0"}],"component":"phpoffice/phpspreadsheet","cve_ids":["CVE-2024-45293"],"ecosystem":"Packagist","epss":0.02776,"exploited":false,"fixed_versions":["2.3.0","1.29.1","2.1.1"],"ghsa_id":"GHSA-6hwr-6v2f-3m88","id":"tcs_01M5KEX46TY73NT6HRPKEYVKP1","modified_at":"2025-03-06T18:36:55.798253Z","published_at":"2024-10-07T15:58:52Z","references":["https://osv.dev/vulnerability/GHSA-6hwr-6v2f-3m88","https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hwr-6v2f-3m88","https://nvd.nist.gov/vuln/detail/CVE-2024-45293","https://github.com/PHPOffice/PhpSpreadsheet/commit/3bcd51826b7f089d1641e756c83030c30c3bdb0c","https://github.com/PHPOffice/PhpSpreadsheet/commit/7d6cb09f6e8204f65e6dd5a0490f7f45f44bb331","https://github.com/PHPOffice/PhpSpreadsheet/commit/949ff63e1f6413e6485f73af012d506aa81384bf","https://github.com/PHPOffice/PhpSpreadsheet"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6hwr-6v2f-3m88","url":"https://osv.dev/vulnerability/GHSA-6hwr-6v2f-3m88"}],"summary":"XXE in PHPSpreadsheet's XLSX reader"}