Vulnerabilities

TI-2026-69276 CVE-2026-107225 · GHSA-5h23-36rv-pm65

Excelize GetStyle panics on negative style indices in styles.xml

MEDIUM 62

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0027 Published 2026-10-07 Fixed in 2.11.1-0.20260731010303-ae2113b410e5 CWE-129

TI-2026-69275 CVE-2026-107224 · GHSA-fw94-4wwp-w8pw

Integer overflow in Excelize crashes on crafted Zip64 workbook

MEDIUM 62

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00306 Published 2026-10-07 Fixed in 2.11.1-0.20260805032953-db93f8d89de7 CWE-190

TI-2026-69274 CVE-2026-107223 · GHSA-fq3v-74gv-27gm

Excelize column mutators exhaust CPU and memory on crafted worksheets

LOW 31

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2026-10-07 Fixed in 2.11.1-0.20260807015645-a54c578af309 CWE-789

TI-2026-69273 CVE-2026-107222 · GHSA-rxcj-4pj5-74gr

Excelize panics on malformed conditional formatting rules

MEDIUM 62

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0027 Published 2026-10-07 Fixed in 2.11.1-0.20260812075026-be7a16390fa6 CWE-129

TI-2026-69270 CVE-2026-107221 · GHSA-8mcq-6wmr-jrjv

Index out of range panic in Excelize reading crafted worksheet rows

MEDIUM 62

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0027 Published 2026-10-07 Fixed in 2.11.1-0.20260816084418-46a5eb289448 CWE-787

TI-2026-69269 CVE-2026-107220 · GHSA-g27h-8qhm-6pff

Panic in Excelize cellInRange with an empty mergeCell ref

MEDIUM 62

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00264 Published 2026-10-07 Fixed in 2.11.1-0.20260820023833-99903a3240e5 CWE-125

TI-2026-69268 CVE-2026-107219 · GHSA-jrfj-fhj2-jjvm

Uncontrolled resource use in Excelize agile decryption exhausts CPU

LOW 39

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2026-10-07 Fixed in 2.11.1-0.20260906004932-2badfcd5841d CWE-400

TI-2026-69267 CVE-2026-107218 · GHSA-8jjq-8j9w-m2v6

Negative index panic in Excelize RIGHT() on supplementary-plane text

LOW 30

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00309 Published 2026-10-07 Fixed in 2.11.1-0.20260908032718-ecd99d761fe0 CWE-129

TI-2026-69266 CVE-2026-107217 · GHSA-c85p-xxjj-2r75

Integer overflow in Excelize column parsing causes process panic

HIGH 72

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2026-10-07 Fixed in 2.11.1-0.20260910071107-696050fbf14e CWE-129

TI-2026-69264 CVE-2026-107216 · GHSA-wp2g-vpjj-g53r

Stack overflow in Excelize ANCHORARRAY formula evaluation

LOW 39

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2026-10-07 Fixed in 2.11.1-0.20260911060113-ea12859e43c6 CWE-674

TI-2026-69263 CVE-2026-107215 · GHSA-x2q3-8cjh-766f

Excelize crafted OLE files cause memory exhaustion and panic

HIGH 72

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0024 Published 2026-10-07 Fixed in 2.11.1-0.20260912113515-5f636f9dcde5 CWE-789

TI-2026-69262 CVE-2026-107214 · GHSA-2j4c-ffch-9f23

Unrecoverable panics in Excelize Decrypt on malformed OLE workbooks

HIGH 72

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0024 Published 2026-10-07 Fixed in 2.11.1-0.20260915055537-22f76f9acb94 CWE-248

TI-2026-69261 CVE-2026-107213 · GHSA-r7x5-4969-99p7

Nil-pointer dereference in Excelize GetSlicers can crash processes

MEDIUM 43

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00234 Published 2026-10-07 Fixed in 2.11.1-0.20260929015830-8ffeb07ec9a3 CWE-476

TI-2026-69260 CVE-2026-107212 · GHSA-jw42-f3rr-4cc3

Unbounded row number in Excelize lets crafted spreadsheets hang reads

HIGH 72

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2026-10-07 Fixed in 2.11.1-0.20260930021559-01a9ff32fb3c CWE-770

TI-2026-69256 CVE-2026-107211 · GHSA-mx22-3794-2vpv

Unchecked pivot cache index in Excelize causes unrecoverable panic

MEDIUM 43

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00234 Published 2026-10-07 Fixed in 2.11.1-0.20261003002531-6258dcebc4e2 CWE-129

TI-2026-38996 CVE-2026-54063 · GHSA-h69g-9hx6-f3v4

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)

HIGH 72

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2026-07-10 Fixed in 2.11.0 CWE-770

TI-2026-42326 CVE-2026-59162 · GHSA-fx5j-qcqg-grpf

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

HIGH 70

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00655 Published 2026-07-10 Fixed in 2.11.0 CWE-248

TI-2026-42325 CVE-2026-59161 · GHSA-q5j5-6p94-4gwc

Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation

HIGH 77

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00655 Published 2026-07-10 Fixed in 2.11.0 CWE-400

Vulnerabilities

Filters