github.com/360EntSecGroup-Skylar/excelize/v2

Go · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the processCVE-2026-107223 · GHSA-FQ3V-74GV-27GMVersion ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	High	Fix reported	2026-11-10
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFileCVE-2026-107219 · GHSA-JRFJ-FHJ2-JJVMVersion ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	High	Fix reported	2026-11-06
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReaderCVE-2026-107224 · GHSA-FW94-4WWP-W8PWVersion ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	Medium	Fix reported	2026-11-06
Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoSCVE-2026-107215 · GHSA-X2Q3-8CJH-766FVersion ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	High	Fix reported	2026-10-20
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooksCVE-2026-107214 · GHSA-2J4C-FFCH-9F23Version ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	High	Fix reported	2026-10-20
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for daysCVE-2026-107212 · GHSA-JW42-F3RR-4CC3Version ranges need review.	github.com/360EntSecGroup-Skylar/excelize/v2 github.com/xuri/excelize/v2	Go	High	Fix reported	2026-10-20