CLSA-2026-1786530064

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1786530064.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786530064
Upstream
CVE (2)
Published
2026-08-12T10:21:04Z
Modified
2026-10-15T09:47:59Z
Summary
TuxCare security update for phpoffice/phpspreadsheet (2 CVEs)
Details

TuxCare rebuilt phpoffice/phpspreadsheet to address 2 CVEs. Fixed in 4.5.0-p3+tuxcare.

Affected packages

TuxCare:Packagist / phpoffice/phpspreadsheet

Package

Name
phpoffice/phpspreadsheet
Purl
pkg:composer/phpoffice/phpspreadsheet

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
4.5.0-p3+tuxcare

Affected versions

4.*
4.5.0
4.5.0-p1+tuxcare
4.5.0-p2+tuxcare

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1786530064.json"
tuxcare 
{
    "base_version":  "4.5.0",
    "fixed_version":  "4.5.0-p3+tuxcare"
}