Vulnerability GO-2026-6684
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
>=2.3.1
>=2.3.1
Summary
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
Details
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
v2.9.0 - v2.11.0 GO-2026-6687
v2.9.0 - v2.11.0 GO-2026-6687
Unknown
5 hours ago
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
v2.8.1 - v2.11.0 GO-2026-6688
v2.8.1 - v2.11.0 GO-2026-6688
Unknown
5 hours ago
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
>=2.3.1 GO-2026-6689
>=2.3.1 GO-2026-6689
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.11.1-0.20260915055537-22f76f9acb94)
1 month ago
September 15, 2026 at 05:55 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC