CVE-2026-107224
1 advisory.
Go/github.com/xuri/excelize/v2 CVE-2026-107224: medium 6.5, EPSS 0.31%
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
Action: Upgrade github.com/xuri/excelize/v2 to 2.11.1-0.20260805032953-db93f8d89de7 or later.
go get github.com/xuri/excelize/v2@v2.11.1-0.20260805032953-db93f8d89de7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.11.1-0.20260805032953-db93f8d89de7 | - |
Fixed versions
| 2.11.1-0.20260805032953-db93f8d89de7 |
Sources
- osv: GHSA-fw94-4wwp-w8pw
- https://github.com/qax-os/excelize/security/advisories/GHSA-fw94-4wwp-w8pw
- https://github.com/qax-os/excelize/pull/2369
- https://github.com/qax-os/excelize/commit/db93f8d89de71589069a54d1b998af02e3c5f7cd
- https://github.com/qax-os/excelize
CVE-2026-107224 · published · modified · JSON