Threats affecting pkg:github/phpoffice/Math

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2025-48882PHPOffice Math · XML External Entity (XXE) High8.7EPSS 0.5%2025-05-30CVE Database V5CVE-2025-48882 PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability. EPSS 0.5%Vulnerability CWE-611	CVE Database V5	2025-05-30

Page 1 of 1