Vulnerability Disclosures
This page lists publicly disclosed vulnerabilities in EPPlus and its dependencies. Each entry has been reviewed by the EPPlus team and includes an assessment with recommended actions.
Last scan completed: 2026-07-24 04:36 UTC — View scan results
5 vulnerabilities are currently under investigation and will be published once assessed.
| CVE ID | Package | EPPlus impact | Status | Affected versions | Detected |
|---|---|---|---|---|---|
| CVE-2026-26171 | System.Security.Cryptography.Xml | Low | fix-available | 8.0.1 – 8.5.1 | 2026-04-16 |
| CVE-2026-33116 | System.Security.Cryptography.Xml | Low | fix-available | 8.0.1 – 8.5.1 | 2026-04-16 |
| CVE-2024-43485 | System.Text.Json | Low | fix-available | 7.3.0 – 7.4.0 | 2024-10-11 |
| CVE-2024-38095 | System.Formats.Asn1 | Low | fix-available | 7.3.0, 7.3.1 | 2024-09-09 |
| CVE-2024-30105 | System.Text.Json | Low | fix-available | 7.3.0, 7.3.1 | 2024-09-09 |