PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer
Moderate severity
GitHub Reviewed
Published
Apr 26, 2026
in
PHPOffice/PhpSpreadsheet
•
Updated May 8, 2026
Give feedback on Dependabot alerts