Vulnerability Scan Results

This page shows the results of the most recent automated vulnerability scan across all supported EPPlus versions and target frameworks.

Scan completed 2026-10-15 06:04 UTC
Grype version 0.120.1
Versions scanned 44
Target frameworks scanned 9
Unassessed findings 199
Version TFMs scanned Matches Status
8.7.1 7 32 32 matches — 6 unassessed
8.7.0 7 32 32 matches — 6 unassessed
8.6.3 7 32 32 matches — 6 unassessed
8.6.2 7 62 62 matches — 6 unassessed
8.6.1 7 62 62 matches — 6 unassessed
8.6.0 7 62 62 matches — 6 unassessed
8.5.4 7 62 62 matches — 6 unassessed
8.5.3 7 62 62 matches — 6 unassessed
8.5.2 7 58 58 matches — 5 unassessed
8.5.1 7 80 80 matches — 6 unassessed
8.5.0 7 80 80 matches — 6 unassessed
8.4.2 7 80 80 matches — 6 unassessed
8.4.1 7 80 80 matches — 6 unassessed
8.4.0 7 80 80 matches — 6 unassessed
8.3.1 6 67 67 matches — 6 unassessed
8.3.0 6 67 67 matches — 6 unassessed
8.2.1 6 67 67 matches — 6 unassessed
8.2.0 6 67 67 matches — 6 unassessed
8.1.1 6 67 67 matches — 6 unassessed
8.1.0 6 67 67 matches — 6 unassessed
7.7.3 6 8 8 matches — 2 unassessed
8.0.8 6 67 67 matches — 6 unassessed
8.0.7 6 67 67 matches — 6 unassessed
8.0.6 6 67 67 matches — 6 unassessed
8.0.5 6 67 67 matches — 6 unassessed
8.0.4 6 67 67 matches — 6 unassessed
7.7.2 6 8 8 matches — 2 unassessed
8.0.3 6 67 67 matches — 6 unassessed
8.0.2 6 67 67 matches — 6 unassessed
7.7.1 6 8 8 matches — 2 unassessed
8.0.1 6 67 67 matches — 6 unassessed
7.7.0 6 8 8 matches — 2 unassessed
7.6.1 6 8 8 matches — 2 unassessed
7.6.0 6 8 8 matches — 2 unassessed
7.5.3 7 10 10 matches — 2 unassessed
7.5.2 7 10 10 matches — 2 unassessed
7.5.1 7 10 10 matches — 2 unassessed
7.5.0 7 10 10 matches — 2 unassessed
7.4.2 7 10 10 matches — 2 unassessed
7.4.1 7 10 10 matches — 2 unassessed
7.4.0 7 16 16 matches — 2 unassessed
7.3.2 7 16 16 matches — 2 unassessed
7.3.1 7 25 25 matches — 2 unassessed
7.3.0 7 25 25 matches — 2 unassessed

Vulnerability scanning is performed automatically every weeknight using Grype against the SBOM for each EPPlus version and target framework. Matches are raw findings from automated scanning — each match is reviewed by the EPPlus team before publication. For confirmed and assessed vulnerabilities, see the vulnerability disclosures page.