[MEDIUM] PHPExcel vulnerable to XXE attacks through libxml

PKSA-mfm1-71w2-z7mz CVE-2014-2054 GHSA-28rm-rj57-qjpv

Affected version: <1.8.0

Reported by:
GitHub

XXE Vulnerability

PKSA-1hs1-xpyf-3z2f CVE-2018-19277

Affected version: <1.8.0

Reported by:
FriendsOfPHP/security-advisories