github.com/360EntSecGroup-Skylar/excelize/v2 vulnerabilities (Go)

3 vulnerabilities.

• github.com/360EntSecGroup-Skylar/excelize/v2 Go Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS CVE-2026-107215 Fix available 7.5 HighOctober 7, 2026
• github.com/360EntSecGroup-Skylar/excelize/v2 Go Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks CVE-2026-107214 Fix available 7.5 HighOctober 7, 2026
• github.com/360EntSecGroup-Skylar/excelize/v2 Go Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days CVE-2026-107212 Fix available 7.5 HighOctober 7, 2026