Vulnerability GO-2026-6688
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
v2.8.1 - v2.11.0
v2.8.1 - v2.11.0
Summary
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
Details
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
v2.9.0 - v2.11.0 GO-2026-6687
v2.9.0 - v2.11.0 GO-2026-6687
Unknown
5 hours ago
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6689
v2.0.0 - v2.11.0 GO-2026-6689
Unknown
5 hours ago
Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2
v2.8.1 - v2.11.0 GO-2026-6695
v2.8.1 - v2.11.0 GO-2026-6695
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.11.1-0.20260911060113-ea12859e43c6)
1 month ago
September 11, 2026 at 06:01 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC