Live › vulnerability › CVE-2026-108359
Go to dashboardA crafted ODS spreadsheet file with an unbounded row repeat count makes the PhpSpreadsheet reader create a cell for every repetition. An attacker who can get the server to read one small file can use up CPU and memory and terminate the PHP worker.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
composer show phpoffice/phpspreadsheet and check whether the installed version is below 1.30.7, 2.1.19, 2.4.8, 3.10.8, or 5.10.0 for its branch1.30.7, 2.1.19, 2.4.8, 3.10.8, or 5.10.0, matching your major versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reader/Ods.php accepts an unbounded table:number-rows-repeated attribute from an ODS table row. When the row contains a value, the reader materializes a cell for every repetition without checking the spreadsheet row limit, so a small attacker-controlled ODS file can consume substantial CPU and memory and terminate the PHP worker. Column repetition is separately bounded and is not part of this vulnerability. This issue is fixed in versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-108359")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.