Go/github.com/360EntSecGroup-Skylar/excelize/v2 CVE-2026-107214: high 7.5
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6684
- nvd: CVE-2026-107214
- https://github.com/qax-os/excelize/security/advisories/GHSA-2j4c-ffch-9f23
- https://github.com/qax-os/excelize/commit/22f76f9acb94b85b3eb9c4365ab4f750cebbc565
- https://github.com/qax-os/excelize/pull/2395
CVE-2026-107214 · published · modified · JSON