Date
The PHPExcel module allows developers to export/import data to/from real Excel files. The D7 version of this module uses the PHPOffice/PHPExcel library that is officially sunset; unofficially in 2017 and officially in 2019. Multiple vulnerabilities in this library are known.
Refer to psa-2024-06-26 for general information on maintaining 3rd party libaries and supply chains.
Solution:
The module should be uninstalled and removed.
Alternative libraries for this functionality may be used via a custom module, for example phpspreadsheet.