Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/xuri/excelize/v2 Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process High Risk 8.0 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref Medium Risk 6.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics Medium Risk 5.3 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml Medium Risk 6.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API Medium Risk 6.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile High Risk 7.5 29 days ago 10 hours ago
github.com/xuri/excelize Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows High Risk 7.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows High Risk 7.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check Medium Risk 6.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader Medium Risk 6.5 29 days ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Panic on out-of-order cell column references when reading worksheets in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize Integer overflow yields an out-of-domain coordinate with nil error, causing panic in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Integer overflow yields an out-of-domain coordinate with nil error, causing panic in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Unbounded <col max> lacks MaxColumns check in flatCols(), causing column mutators to hang or OOM in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 GetConditionalFormats indexes conditional-formatting rule sub-elements with no length / nil check in github.com/xuri/excelize Unknown 10 hours ago 10 hours ago
github.com/xuri/excelize/v2 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow High Risk 7.5 28 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic High Risk 8.0 28 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS High Risk 7.5 28 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element High Risk 8.0 28 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks High Risk 7.5 28 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days High Risk 7.5 28 days ago 17 days ago
github.com/xuri/excelize/v2 Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2 Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize Unknown 17 days ago 17 days ago
github.com/xuri/excelize/v2 Panic via negative shared-string index in github.com/xuri/excelize Unknown 1 month ago 1 month ago
github.com/xuri/excelize Excelize: Negative shared-string index causes panic in GetCellValue and GetRows Medium Risk 6.0 1 month ago 1 month ago
github.com/xuri/excelize/v2 Excelize: Negative shared-string index causes panic in GetCellValue and GetRows Medium Risk 6.0 1 month ago 1 month ago
github.com/xuri/excelize Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation High Risk 8.0 1 month ago 1 month ago
github.com/xuri/excelize/v2 Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation High Risk 8.0 1 month ago 1 month ago
github.com/xuri/excelize/v2 Unbounded memory allocation via streaming row reader in github.com/xuri/excelize Unknown 1 month ago 1 month ago
github.com/xuri/excelize/v2 Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) High Risk 7.5 3 months ago 3 months ago
github.com/xuri/excelize/v2 Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) in github.com/xuri/excelize Unknown 3 months ago 3 months ago