Qax-os Excelize vulnerabilities

• excelize Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml CVE-2026-107225 Fix available 6.5 MediumOctober 7, 2026
• excelize Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader CVE-2026-107224 Fix available 6.5 MediumOctober 7, 2026
• excelize Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process CVE-2026-107223 Fix available 7.1 HighOctober 7, 2026
• excelize Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check CVE-2026-107222 Fix available 6.5 MediumOctober 7, 2026
• excelize Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API CVE-2026-107221 Fix available 6.5 MediumOctober 7, 2026
• excelize Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref CVE-2026-107220 Fix available 6.5 MediumOctober 7, 2026
• excelize Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile CVE-2026-107219 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics CVE-2026-107218 Fix available 5.3 MediumOctober 7, 2026
• excelize Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows CVE-2026-107217 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow CVE-2026-107216 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS CVE-2026-107215 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks CVE-2026-107214 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element CVE-2026-107213 Fix available 8.7 HighOctober 7, 2026
• excelize Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days CVE-2026-107212 Fix available 7.5 HighOctober 7, 2026
• excelize Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic CVE-2026-107211 Fix available 8.7 HighOctober 7, 2026
• excelize Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) CVE-2026-54063 Fix available 7.5 HighJuly 10, 2026
• excelize Excelize: Negative shared-string index causes panic in GetCellValue and GetRows CVE-2026-59162 Fix available 6.9 MediumJuly 10, 2026
• excelize Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation CVE-2026-59161 Fix available 8.7 HighJuly 10, 2026