By vendor

Excelize vulnerabilities

Known CVEs affecting Excelize products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-54063HIGH 7.5

  Excelize, a popular Go library for handling Excel spreadsheets, contains a flaw in how it processes XML row definitions. When opening a malicious XLSX file, the library fails to validate the row count before allocating memory, allowing attackers to either exhaust system memory or crash the application. No login or user interaction is required—simply opening a crafted file triggers the problem. Services that process user-supplied Excel files are at risk.

• CVE-2026-59162HIGH 7.5

  Excelize, a Go library for reading and writing Excel files, has a flaw that causes it to crash when processing malicious XLSX files. An attacker can craft a spreadsheet with a specially crafted cell reference that points to an invalid memory location, causing the application using Excelize to panic and stop working. This is a denial-of-service vulnerability that affects any application built with Excelize prior to version 2.11.0.