Go/github.com/360EntSecGroup-Skylar/excelize/v2 CVE-2026-107215: high 7.5
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6689
- nvd: CVE-2026-107215
- https://github.com/qax-os/excelize/security/advisories/GHSA-x2q3-8cjh-766f
- https://github.com/qax-os/excelize/commit/5f636f9dcde55911f14290060b017f0cc88cd694
- https://github.com/qax-os/excelize/pull/2396
CVE-2026-107215 · published · modified · JSON