CVE-2026-54063
- EPSS 0.39%
- Veröffentlicht 10.07.2026 15:53:31
- Zuletzt bearbeitet 16.07.2026 14:11:27
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the checkSheet() function in github.com/xuri/excelize/v2 uses an attacker-controlled <row r="N"> XML attribute value directly as the length argum...
CVE-2026-59162
- EPSS 0.39%
- Veröffentlicht 10.07.2026 15:51:26
- Zuletzt bearbeitet 16.07.2026 13:44:56
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an ...
CVE-2026-59161
- EPSS 0.4%
- Veröffentlicht 10.07.2026 15:47:38
- Zuletzt bearbeitet 16.07.2026 14:10:24
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce the TotalRows limit on the row r attribute, allowing a small XLSX file w...