Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process | High Risk 8.0 | 29 days ago | 9 hours ago |
|
|
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref | Medium Risk 6.5 | 29 days ago | 9 hours ago |
|
|
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics | Medium Risk 5.3 | 29 days ago | 9 hours ago |
|
|
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml | Medium Risk 6.5 | 29 days ago | 9 hours ago |
|
|
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API | Medium Risk 6.5 | 29 days ago | 9 hours ago |
|
|
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile | High Risk 7.5 | 29 days ago | 9 hours ago |
|
|
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows | High Risk 7.5 | 29 days ago | 9 hours ago |
|
|
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows | High Risk 7.5 | 29 days ago | 9 hours ago |
|
|
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check | Medium Risk 6.5 | 29 days ago | 9 hours ago |
|
|
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader | Medium Risk 6.5 | 29 days ago | 9 hours ago |
|
|
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Panic on out-of-order cell column references when reading worksheets in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Integer overflow yields an out-of-domain coordinate with nil error, causing panic in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Integer overflow yields an out-of-domain coordinate with nil error, causing panic in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Unbounded <col max> lacks MaxColumns check in flatCols(), causing column mutators to hang or OOM in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
GetConditionalFormats indexes conditional-formatting rule sub-elements with no length / nil check in github.com/xuri/excelize | Unknown | 9 hours ago | 9 hours ago |
|
|
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow | High Risk 7.5 | 28 days ago | 17 days ago |
|
|
Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic | High Risk 8.0 | 28 days ago | 17 days ago |
|
|
Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS | High Risk 7.5 | 28 days ago | 17 days ago |
|
|
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element | High Risk 8.0 | 28 days ago | 17 days ago |
|
|
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks | High Risk 7.5 | 28 days ago | 17 days ago |
|
|
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days | High Risk 7.5 | 28 days ago | 17 days ago |
|
|
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize | Unknown | 17 days ago | 17 days ago |
|
|
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize | Unknown | 17 days ago | 17 days ago |
|
|
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize | Unknown | 17 days ago | 17 days ago |
|
|
Panic via unchecked pivot-cache field index in github.com/xuri/excelize/v2 | Unknown | 17 days ago | 17 days ago |
|
|
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize | Unknown | 17 days ago | 17 days ago |
|
|
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize | Unknown | 17 days ago | 17 days ago |
|
|
Panic via negative shared-string index in github.com/xuri/excelize | Unknown | 1 month ago | 1 month ago |
|
|
Excelize: Negative shared-string index causes panic in GetCellValue and GetRows | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
|
Excelize: Negative shared-string index causes panic in GetCellValue and GetRows | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
|
Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation | High Risk 8.0 | 1 month ago | 1 month ago |
|
|
Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation | High Risk 8.0 | 1 month ago | 1 month ago |
|
|
Unbounded memory allocation via streaming row reader in github.com/xuri/excelize | Unknown | 1 month ago | 1 month ago |
|
|
Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) | High Risk 7.5 | 3 months ago | 3 months ago |
|
|
Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) in github.com/xuri/excelize | Unknown | 3 months ago | 3 months ago |
Page 1