Skip to content

Security: oleibman/PhpSpreadsheet

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability within this project, please report it via Private Vulnerability Reporting.

Please do not report security vulnerabilities through public GitHub issues.

What to Include

  • Type of issue (e.g., buffer overflow, SQL injection, cross-site scripting).
  • Full paths of source file(s) related to the manifestation of the issue.
  • The location of the affected source code within those paths.
  • Proof of concept (step-by-step instructions to reproduce the issue).
  • Suggested remediation.

Supported Versions

Version Supported
>= 5.10.0 ✅
>= 4.0.0, < 5.10.0 ❌
>= 3.10.8, < 4.0.0 ✅
>= 3.0.0, < 3.10.8 ❌
>= 2.4.8, < 3.0.0 ✅
>= 2.2.0, < 2.4.8 ❌
>= 2.1.19, < 2.2.0 ✅
>= 2.0.0, < 2.1.19 ❌
>= 1.30.6, < 2.0.0 ✅
< 1.30.6 ❌

Disclosure Policy

We follow a coordinated vulnerability disclosure approach. We ask that you give us reasonable time to address the issue before making any public disclosures.

There aren't any published security advisories