Product by Go
Github.com/xuri/excelize/v2
9 known vulnerabilities in Github.com/xuri/excelize/v2 (Go), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-59161 | Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation | 7.5 | |
| High | CVE-2026-59162 | Excelize: Negative shared-string index causes panic in GetCellValue and GetRows | 7.5 | |
| High | CVE-2026-54063 | Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) | 7.5 | |
| High | CVE-2026-107216 | Qax-os Excelize: Uncontrolled Recursion | 7.5 | |
| High | CVE-2026-107213 | Qax-os Excelize: NULL Pointer Dereference | 5.5 | |
| High | CVE-2026-107211 | Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic | 5.5 | |
| High | CVE-2026-107212 | Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days | 7.5 | |
| High | CVE-2026-107215 | Qax-os Excelize: Memory Allocation with Excessive Size Value | 7.5 | |
| High | CVE-2026-107214 | Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks | 7.5 |