Support PHPSpreadsheet ^2.0

Created on 18 September 2024, 3 months ago

Problem/Motivation

Support / require PHPSpreadsheet ^2.0

Current ^1.26 has security advisories:

  • CVE-2024-45048 (<2.2.1) - XXE in PHPSpreadsheet encoding is returned - https://github.com/advisories/GHSA-ghg6-32f9-2jp7
  • CVE-2024-45046 (<2.1.0) - PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style - https://github.com/advisories/GHSA-wgmf-q9vr-vww6

Steps to reproduce

composer audit --locked

Proposed resolution

Support PHPSpreadsheet ^2.0

Note: this is a copy of issue created by @crzdev

πŸ“Œ Task
Status

Fixed

Version

2.2

Component

Code

Created by

πŸ‡ΊπŸ‡¦Ukraine vlad.dancer Kyiv

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024