CVE-2018-19277

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file

Date published : 2018-11-14

https://github.com/MewesK/TwigSpreadsheetBundle/issues/18

https://github.com/PHPOffice/PhpSpreadsheet/issues/771