CVE-2026-107223

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

Excelize

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches flatCols, which expands xlsxCol.Min through xlsxCol.Max without enforcing MaxColumns. When a crafted worksheet supplies an oversized col max attribute and the application invokes a column mutator, flatCols performs a deep copy and append…

7. Okt 2026

Ausgewertete Quellen

• NVD
  CVE-2026-107223
• GitHub
  https://github.com/qax-os/excelize/security/advisories/GHSA-fq3v-74gv-27gm