EUVD-2024-2584

Malicious code in bioql PyPI...

EUVD-2025-0033

Malicious code in bioql PyPI...

EUVD-2025-0021

Malicious code in bioql PyPI...

EUVD-2025-0039

Malicious code in bioql PyPI...

EUVD-2025-0050

Malicious code in bioql PyPI...

EUVD-2025-0053

Malicious code in bioql PyPI...

EUVD-2024-3140

Malicious code in bioql PyPI...

EUVD-2025-0028

Malicious code in bioql PyPI...

EUVD-2024-3153

Malicious code in bioql PyPI...

EUVD-2024-3279

Malicious code in bioql PyPI...

EUVD-2025-0027

Malicious code in bioql PyPI...

EUVD-2025-0143

Malicious code in bioql PyPI...

EUVD-2024-3208

Malicious code in bioql PyPI...

Server-Side Request Forgery (SSRF)

phpoffice/phpspreadsheet is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation because the setPath method in the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class allows attackers to craft requests to internal resources...

Exploit for Cross-site Scripting in Phpoffice Phpspreadsheet

CVE-2025-22131 POC CVE-2025...

Exploit for Cross-site Scripting in Phpoffice Phpspreadsheet

CVE-2025-22131-PoC PoC for CVE-2025-22131 PhpSpreadsheet...

Server-side Request Forgery (SSRF)

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the setPath method of the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class, where a user...

GHSA-RX7M-68VC-PPXH PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser

Product: PhpSpreadsheet Version: 3.8.0 CWE-ID: CWE-918: Server-Side Request Forgery SSRF CVSS vector v.3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS vector v.4.0: 8.7 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Description: SSRF occurs when a processed HTML document is read and...

PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser

Product: PhpSpreadsheet Version: 3.8.0 CWE-ID: CWE-918: Server-Side Request Forgery SSRF CVSS vector v.3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS vector v.4.0: 8.7 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Description: SSRF occurs when a processed HTML document is read and...

CVE-2025-54370

PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.12, 2.4.0, 3.10.0, and 5.0.0, SSRF can occur when a processed HTML document is read and displayed in the browser. The vulnerability lies in the setPath method of the...