Vulnerability Disclosures

This page lists publicly disclosed vulnerabilities in EPPlus and its dependencies. Each entry has been reviewed by the EPPlus team and includes an assessment with recommended actions.

Last scan completed: 2026-07-24 04:36 UTC — View scan results

CVE ID Package EPPlus impact Status Affected versions Detected
CVE-2026-50527 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.6.2 2026-07-23
CVE-2026-47304 System.Security.Cryptography.Xml Medium fix-available 8.0.1 – 8.6.2 2026-07-22
CVE-2026-50525 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.6.2 2026-07-22
CVE-2026-50648 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.6.2 2026-07-22
CVE-2026-47302 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.6.2 2026-07-22
CVE-2026-26171 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.5.1 2026-04-16
CVE-2026-33116 System.Security.Cryptography.Xml Low fix-available 8.0.1 – 8.5.1 2026-04-16
CVE-2024-43485 System.Text.Json Low fix-available 7.3.0 – 7.4.0 2024-10-11
CVE-2024-38095 System.Formats.Asn1 Low fix-available 7.3.0, 7.3.1 2024-09-09
CVE-2024-30105 System.Text.Json Low fix-available 7.3.0, 7.3.1 2024-09-09