CVE-2026-45034
CriticalAdvisory
Published 8 Jun 2026In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.2
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 16
- of 17,781 indexed, latest versions
- Container images
- 11
- deployed by those charts
- Fix available
- 1 of 1
- affected package
PHPSpreadsheet has a patch bypass for CVE-2026-34084
Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 11 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| phpoffice/ | 1.18.0, 1.19.0, 1.21.0, 1.23.0+6 more | 1.30.5 | 11 |
- OSV records
- GHSA-87m4-826x-3crx
Charts affected
16 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| snipeitt3n | 3.4.1 | 1 of 2See more | 18,509 |
| mauticone-acre-fundVerified publisher | 0.1.7 | 1 of 3See more | 2,667 |
| brpservicebrpservice | 1.1.0 | 1 of 4See more | 7,830 |
| commonground-gatewaycommonground-gateway | 1.5.4 | 1 of 7See more | 9,724 |
| akauntingf3k-techVerified publisher | 1.3121.0 | 1 of 4See more | 4,333 |
| opencatalogiopencatalogi | 1.0.6 | 1 of 8See more | 14,838 |
| commonground-gatewaycommonground-gateway-frontend | 0.1.5 | 1 of 4See more | 2,825 |
| cspconsolecspconsole | 1.3.11 | 1 of 5See more | 12,274 |
| equizequiz | 0.0.1 | 1 of 3See more | 7,541 |
| equizequiz-chart | 0.0.1 | 1 of 3See more | 7,541 |
| anonaddygeek-cookbookVerified publisher | 6.0.0 | 1 of 1See more | 4,788 |
| openemrgeek-cookbookVerified publisher | 5.2.0 | 1 of 1See more | 8,392 |
| fossologymidokura-communityVerified publisher | 0.2.2 | 1 of 2See more | 3,294 |
| akauntingnas-helm-chartsVerified publisher | 1.0.3 | 1 of 2See more | 12,813 |
| commonground-gatewayopencatalogi | 1.5.3 | 1 of 7See more | 9,724 |
| commonground-gatewayskeleton-pip | 0.1.7 | 1 of 5See more | 2,825 |
Container images carrying it
11 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 947882bf2c37 | phpoffice/ | 1.30.5 | 5 |
| yzhou442/ | a3f7ca69e28d | phpoffice/ | 1.30.5 | 2 |
| akaunting/ | 52811b36ec3a | phpoffice/ | 1.30.5 | 1 |
| akaunting/ | e7d5c245b1a0 | phpoffice/ | 1.30.5 | 1 |
| anonaddy/ | 957a95565166 | phpoffice/ | 1.30.5 | 1 |
| cspconsole/ | 46dda4a31bd6 | phpoffice/ | 1.30.5 | 1 |
| fossology/ | 8bd1f22ba7bb | phpoffice/ | 1.30.5 | 1 |
| mautic/ | 94ea4acf4049 | phpoffice/ | 1.30.5 | 1 |
| openemr/ | 89eaa6d9a4e3 | phpoffice/ | 1.30.5 | 1 |
| snipe/ | 55fb7636a98c | phpoffice/ | 1.30.5 | 1 |
| ghcr.io/ | c17f1ba17d36 | phpoffice/ | 1.30.5 | 1 |