Vulnerability GO-2026-6689
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
>=2.3.1
>=2.3.1
Summary
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
Details
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6685
v2.0.0 - v2.11.0 GO-2026-6685
Unknown
5 hours ago
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
v2.9.0 - v2.11.0 GO-2026-6687
v2.9.0 - v2.11.0 GO-2026-6687
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.11.1-0.20260912113515-5f636f9dcde5)
1 month ago
September 12, 2026 at 11:35 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC