{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.8.2"}],"component":"phpoffice/phpexcel","cve_ids":["CVE-2025-22131"],"ecosystem":"Packagist","epss":0.00396,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-79xx-vf93-p7cx","id":"tcs_01M5KEXXH901JH9H876CK57ZX7","modified_at":"2025-03-06T18:37:31.054095Z","published_at":"2025-01-21T21:09:13Z","references":["https://osv.dev/vulnerability/GHSA-79xx-vf93-p7cx","https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-79xx-vf93-p7cx","https://nvd.nist.gov/vuln/detail/CVE-2025-22131","https://github.com/PHPOffice/PhpSpreadsheet/commit/4088381ccfaf241d7d42c333de0dc8c98e338743","https://github.com/PHPOffice/PhpSpreadsheet"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-79xx-vf93-p7cx#Packagist/phpoffice/phpexcel","url":"https://osv.dev/vulnerability/GHSA-79xx-vf93-p7cx"}],"summary":"Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet"}