diff --git a/phpoffice/phpexcel/CVE-2015-3542.yaml b/phpoffice/phpexcel/CVE-2015-3542.yaml
new file mode 100644
index 000000000..b9df0c7d9
--- /dev/null
+++ b/phpoffice/phpexcel/CVE-2015-3542.yaml
@@ -0,0 +1,8 @@
+title:     XXE Vulnerability
+link:      https://github.com/PHPOffice/PHPExcel/commit/0ab614fd952f82f9b7a9280731daa2300e6b000c
+cve:       CVE-2015-3542
+branches:
+    '1.8':
+        time:       2015-04-29 00:43:04
+        versions:   ['<1.8.1']
+reference: composer://phpoffice/phpexcel