github.com/xuri/excelize/v2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-107211Highgithub.com/xuri/excelize/v2: Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic CVE-2026-107212Highgithub.com/xuri/excelize/v2: Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days CVE-2026-107213Highgithub.com/xuri/excelize/v2: Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element CVE-2026-107214Highgithub.com/xuri/excelize/v2: Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks CVE-2026-107215Highgithub.com/xuri/excelize/v2: Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS CVE-2026-107216Highgithub.com/xuri/excelize/v2: Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow CVE-2026-107217Highgithub.com/xuri/excelize/v2: Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0"…CVE-2026-107218Mediumgithub.com/xuri/excelize/v2: Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics CVE-2026-107219Highgithub.com/xuri/excelize/v2: Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile CVE-2026-107220Mediumgithub.com/xuri/excelize/v2: Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref CVE-2026-107221Mediumgithub.com/xuri/excelize/v2: Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet…CVE-2026-107222Mediumgithub.com/xuri/excelize/v2: Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check CVE-2026-107223Highgithub.com/xuri/excelize/v2: Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator…CVE-2026-107224Mediumgithub.com/xuri/excelize/v2: Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader CVE-2026-107225Mediumgithub.com/xuri/excelize/v2: Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml CVE-2026-59161Highgithub.com/xuri/excelize/v2: Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation CVE-2026-59162Mediumgithub.com/xuri/excelize/v2: Excelize: Negative shared-string index causes panic in GetCellValue and GetRows CVE-2026-54063Highgithub.com/xuri/excelize/v2: Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo