Vulnerability GO-2026-6687
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
v2.9.0 - v2.11.0
v2.9.0 - v2.11.0
Summary
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
Details
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
v2.8.1 - v2.11.0 GO-2026-6688
v2.8.1 - v2.11.0 GO-2026-6688
Unknown
5 hours ago
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6689
v2.0.0 - v2.11.0 GO-2026-6689
Unknown
5 hours ago
Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2
v2.8.1 - v2.11.0 GO-2026-6695
v2.8.1 - v2.11.0 GO-2026-6695
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.11.1-0.20260929015830-8ffeb07ec9a3)
21 days ago
September 29, 2026 at 01:58 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC