CVE-2026-107223

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and Max against the worksheet column limit. SetColWidth reaches flatCols, which expands xlsxCol.Min through xlsxCol.Max without enforcing MaxColumns. When a crafted worksheet supplies an oversized col max attribute and the application invokes a column mutator, flatCols performs a deep copy and append for every attacker-selected column number, allowing an attacker to consume excessive CPU and memory or trigger OOM. No fixed version is available as of this review.

• CWE-789

• https://github.com/qax-os/excelize/commit/a54c578af309fa81f448143ed2b7a91192cc58a7
• https://github.com/qax-os/excelize/pull/2370
• https://github.com/qax-os/excelize/security/advisories/GHSA-fq3v-74gv-27gm

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107218Excelize is a Go language library for reading and writing Mi…5.3
• CVE-2026-107219Excelize is a Go language library for reading and writing Mi…7.5
• CVE-2026-10722A vulnerability has been found in cilium ebpf up to 0.21.0. …5.5
• CVE-2026-107220Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107221Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107222Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107224Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107225Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107227The AsyncHttpClient (AHC) library allows Java applications t…7.5
• CVE-2026-107228The AsyncHttpClient (AHC) library allows Java applications t…6.8
• CVE-2026-107229The AsyncHttpClient (AHC) library allows Java applications t…4
• CVE-2026-10723BIND may accept incorrect child-zone NSEC3 records as valid,…6.8