E
Vendor security profile
excelize
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical0
CISA KEV0
Public exploit18
Patch rate%100
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
3
0
0
15
CVE KEV
CVE severity distribution
18toplam CVE
High12 (67%)
Medium6 (33%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%100
Public exploit
18Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.5
CVE-2026-107225
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
Q
Patch verifiedEPSS %0
6.5
CVE-2026-107224
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
Q
Patch verifiedEPSS %0
7.1
CVE-2026-107223
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
Q
Patch verifiedEPSS %0
6.5
CVE-2026-107222
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
Q
Patch verifiedEPSS %0
6.5
CVE-2026-107221
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
Q
Patch verifiedEPSS %0
6.5
CVE-2026-107220
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
Q
Patch verifiedEPSS %0
7.5
CVE-2026-107219
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
Q
Patch verifiedEPSS %0
5.3
CVE-2026-107218
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
Q
Patch verifiedEPSS %0
7.5
CVE-2026-107217
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
Q
Patch verifiedEPSS %0
7.5
CVE-2026-107216
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
Q
Patch verifiedEPSS %0