Vulnerability Disclosures

This page lists publicly disclosed vulnerabilities in EPPlus dependencies. Each entry has been reviewed by the EPPlus team and includes an assessment with recommended actions.

Last scan completed: 2026-04-16 04:28 UTC — View scan results

CVE ID Package Severity Status Affected versions
CVE-2026-26171 System.Security.Cryptography.Xml High fix-available 8.0.1 – 8.5.1
CVE-2026-33116 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.5.1
CVE-2024-30105 System.Text.Json Low fix-available 7.3.0, 7.3.1
CVE-2024-38095 System.Formats.Asn1 Low fix-available 7.3.0, 7.3.1
CVE-2024-43485 System.Text.Json Low fix-available 7.3.0 – 7.4.0