6 Total advisories
6 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/360EntSecGroup-Skylar/excelize/v2 is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2026-107219
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize
UNKNOWN
CVE-2026-107223
Unbounded <col max> lacks MaxColumns check in flatCols(), causing column mutators to hang or OOM in github.com/xuri/excelize
UNKNOWN
CVE-2026-107224
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize
UNKNOWN
CVE-2026-107215
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
UNKNOWN
CVE-2026-107214
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
UNKNOWN
CVE-2026-107212
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes