{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.2"}],"component":"phpoffice/phpexcel","cve_ids":["CVE-2024-45293"],"ecosystem":"Packagist","epss":0.02776,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6hwr-6v2f-3m88","id":"tcs_01M5KEX49J79RV1FKT2SGXYCDT","modified_at":"2025-03-06T18:36:55.798253Z","published_at":"2024-10-07T15:58:52Z","references":["https://osv.dev/vulnerability/GHSA-6hwr-6v2f-3m88","https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hwr-6v2f-3m88","https://nvd.nist.gov/vuln/detail/CVE-2024-45293","https://github.com/PHPOffice/PhpSpreadsheet/commit/3bcd51826b7f089d1641e756c83030c30c3bdb0c","https://github.com/PHPOffice/PhpSpreadsheet/commit/7d6cb09f6e8204f65e6dd5a0490f7f45f44bb331","https://github.com/PHPOffice/PhpSpreadsheet/commit/949ff63e1f6413e6485f73af012d506aa81384bf","https://github.com/PHPOffice/PhpSpreadsheet"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6hwr-6v2f-3m88#Packagist/phpoffice/phpexcel","url":"https://osv.dev/vulnerability/GHSA-6hwr-6v2f-3m88"}],"summary":"XXE in PHPSpreadsheet's XLSX reader"}