Vulnerability GO-2026-6681
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:53 PM UTC
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize
>=2.3.1
>=2.3.1
Summary
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize
Details
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize
>=2.8.0 <2.11.1-0.20260731010303-ae2113b410e5 GO-2026-6674
>=2.8.0 <2.11.1-0.20260731010303-ae2113b410e5 GO-2026-6674
Unknown
9 hours ago
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics in github.com/xuri/excelize
>=2.10.1 <2.11.1-0.20260908032718-ecd99d761fe0 GO-2026-6675
>=2.10.1 <2.11.1-0.20260908032718-ecd99d761fe0 GO-2026-6675
Unknown
9 hours ago
Panic on out-of-order cell column references when reading worksheets in github.com/xuri/excelize
<2.11.1-0.20260816084418-46a5eb289448 GO-2026-6676
<2.11.1-0.20260816084418-46a5eb289448 GO-2026-6676
Unknown
9 hours ago
Integer overflow yields an out-of-domain coordinate with nil error, causing panic in github.com/xuri/excelize
<2.11.1-0.20260910071107-696050fbf14e GO-2026-6677
<2.11.1-0.20260910071107-696050fbf14e GO-2026-6677
Unknown
9 hours ago
Unbounded <col max> lacks MaxColumns check in flatCols(), causing column mutators to hang or OOM in github.com/xuri/excelize
>=2.1.0 GO-2026-6678
>=2.1.0 GO-2026-6678
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:53 PM UTC
Fixed (v2.11.1-0.20260906004932-2badfcd5841d)
2 months ago
September 06, 2026 at 12:49 AM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC