diff --git a/appveyor8.yml b/appveyor8.yml
index d8e9aa9a7..c7dc848c4 100644
--- a/appveyor8.yml
+++ b/appveyor8.yml
@@ -1,4 +1,4 @@
-version: 8.6.2.{build}
+version: 8.6.3.{build}
branches:
only:
- develop8
@@ -10,15 +10,15 @@ install:
& $env:temp\dotnet-install.ps1 -Architecture x64 -Version '10.0.100' -InstallDir "$env:ProgramFiles\dotnet"
init:
- ps: >-
- Update-AppveyorBuild -Version "8.6.2.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
+ Update-AppveyorBuild -Version "8.6.3.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
- Write-Host "8.6.2.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
+ Write-Host "8.6.3.$env:appveyor_build_number-$(Get-Date -format yyyyMMdd)-$env:appveyor_repo_branch"
dotnet_csproj:
patch: true
file: '**\*.csproj'
version: '{version}'
- assembly_version: 8.6.2.{build}
- file_version: 8.6.2.{build}
+ assembly_version: 8.6.3.{build}
+ file_version: 8.6.3.{build}
nuget:
project_feed: true
before_build:
diff --git a/docs/articles/fixedissues.md b/docs/articles/fixedissues.md
index 16265f640..3183bd499 100644
--- a/docs/articles/fixedissues.md
+++ b/docs/articles/fixedissues.md
@@ -1,4 +1,7 @@
# Features / Fixed issues - EPPlus 8
+## Version 8.6.3
+### Security
+* Updated System.Security.Cryptography.Xml to address five security vulnerabilities in the .NET XML signing dependency: four denial of service vulnerabilities (CVE-2026-47302, CVE-2026-50525, CVE-2026-50527, CVE-2026-50648) and one security feature bypass (CVE-2026-47304). The package is updated to 8.0.4 (.NET Framework, .NET 8 and .NET Standard), 9.0.18 (.NET 9) and 10.0.10 (.NET 10).
## Version 8.6 2
### Minor features and fixed issues
* Added property ´AlwaysRefreshImageFunction´ to ´ParsingConfiguration´, to disable download of external content in the calculation of the IMAGE function.
diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index 564eca723..2974b2731 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -9,8 +9,8 @@
-
-
+
+
diff --git a/src/EPPlus/EPPlus.csproj b/src/EPPlus/EPPlus.csproj
index 3fe339ddf..dbf10f6e6 100644
--- a/src/EPPlus/EPPlus.csproj
+++ b/src/EPPlus/EPPlus.csproj
@@ -1,9 +1,9 @@
net8.0;net9.0;net10.0;netstandard2.1;netstandard2.0;net462;net35
- 8.6.2.0
- 8.6.2.0
- 8.6.2
+ 8.6.3.0
+ 8.6.3.0
+ 8.6.3
true
https://epplussoftware.com
EPPlus Software AB
@@ -18,7 +18,7 @@
readme.md
EPPlus Software AB
- EPPlus 8.6.2
+ EPPlus 8.6.3
IMPORTANT NOTICE!
From version 5 EPPlus changes the license model using a dual license, Polyform Non Commercial / Commercial license.
@@ -26,6 +26,9 @@
Commercial licenses can be purchased from https://epplussoftware.com
This applies to EPPlus version 5 and later. Earlier versions are still licensed LGPL.
+ ## Version 8.6.3
+ * Updated System.Security.Cryptography.Xml to address security vulnerabilities (CVE-2026-47302, CVE-2026-47304, CVE-2026-50525, CVE-2026-50527, CVE-2026-50648).
+
## Version 8.6.2
* Minor bug fixes. See https://epplussoftware.com/Developers/MinorFeaturesAndIssues
@@ -583,8 +586,9 @@
A list of fixed issues can be found here https://epplussoftware.com/docs/8.6/articles/fixedissues.html
Version history
+ 8.6.3 20260724 Updated System.Security.Cryptography.Xml for security vulnerabilities.
8.6.2 20260721 Minor bug fixes. See https://epplussoftware.com/Developers/MinorFeaturesAndIssues
- 8.6.1 20260616 3 new functions. Minor bug fixes.
+ 8.6.1 20260616 3 new functions. Minor bug fixes.
8.6.0 20260529 9 new functions. Support for trim Reference operator.
8.5.4 20260430 Minor bug fixes.
8.5.3 20260416 Updated .NET 8 references incorrectly update to 9.x to 8.x.
@@ -790,20 +794,20 @@
-
+
-
+
-
-
+
+
-
+
-
+
-
-
+
+