Skip to content
Excelize vulnerabilities
Newest
-
excelize
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
CVE-2026-107225
Fix available
6.5 Medium
-
excelize
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
CVE-2026-107224
Fix available
6.5 Medium
-
excelize
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
CVE-2026-107223
Fix available
7.1 High
-
excelize
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
CVE-2026-107222
Fix available
6.5 Medium
-
excelize
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
CVE-2026-107221
Fix available
6.5 Medium
-
excelize
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
CVE-2026-107220
Fix available
6.5 Medium
-
excelize
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
CVE-2026-107219
Fix available
7.5 High
-
excelize
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
CVE-2026-107218
Fix available
5.3 Medium
-
excelize
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
CVE-2026-107217
Fix available
7.5 High
-
excelize
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
CVE-2026-107216
Fix available
7.5 High
-
excelize
Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS
CVE-2026-107215
Fix available
7.5 High
-
excelize
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks
CVE-2026-107214
Fix available
7.5 High
-
excelize
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element
CVE-2026-107213
Fix available
8.7 High
-
excelize
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days
CVE-2026-107212
Fix available
7.5 High
-
excelize
Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic
CVE-2026-107211
Fix available
8.7 High
-
excelize
Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)
CVE-2026-54063
Fix available
7.5 High
-
excelize
Excelize: Negative shared-string index causes panic in GetCellValue and GetRows
CVE-2026-59162
Fix available
6.9 Medium
-
excelize
Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation
CVE-2026-59161
Fix available
8.7 High