PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
Moderate severity
GitHub Reviewed
Published
Oct 7, 2024
in
PHPOffice/PhpSpreadsheet
•
Updated Oct 16, 2024
Give feedback on Dependabot alerts