GHSA lookup
GHSA-Q4Q6-R8WH-5CGH
Pruva has a verified reproduction for GHSA-Q4Q6-R8WH-5CGH: PhpSpreadsheet: SSRF via unsafe stream wrapper in IOFactory::load(). The canonical evidence record is REPRO-2026-00150.
REPRO
REPRO-2026-00150
Package
phpoffice/phpspreadsheet · composer
Severity
CRITICAL
Status
published