github.com/360EntSecGroup-Skylar/excelize/v2
Go6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/360EntSecGroup-Skylar/excelize/v2page 1 of 1
- CVE-2026-107212HIGHCVSS 7.5EG 7.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relie…
- CVE-2026-107214HIGHCVSS 7.5EG 7.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, ind…
- CVE-2026-107215HIGHCVSS 7.5EG 7.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector cha…
- CVE-2026-107219HIGHCVSS 7.5EG 7.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifi…
- CVE-2026-107223HIGHCVSS 7.5EG 7.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches…
- CVE-2026-107224MEDIUMCVSS 6.5EG 6.52026-10-07
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and …
Check whether github.com/360EntSecGroup-Skylar/excelize/v2 is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/360EntSecGroup-Skylar/excelize/v2 CVEs against the assets you own.
Book a Demo →