EPPlus 5 and 6 are automatically scanned for vulnerabilities and static code analysis is performed as part of the CI. Security patches will be provided via new revisions released in our public Nuget feed.
| Version | Supported | Comment |
|---|---|---|
| 6.x.x | ✅ | |
| 5.x.x | ✅ | |
| < 4.0 | ❌ | Deprecated/unsupported versions |
Create an issue in our issue tracker, describe the vulnerability (including relevant links) and what version of EPPlus that is affected.