qax-os vulnerabilities

Newest CVEs

• CVE-2026-107225

  Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

  qax-os · excelize

  Medium6.5
• CVE-2026-107224

  Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

  qax-os · excelize

  Medium6.5
• CVE-2026-107223

  Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

  qax-os · excelize

  High7.1
• CVE-2026-107222

  Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

  qax-os · excelize

  Medium6.5
• CVE-2026-107221

  Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

  qax-os · excelize

  Medium6.5
• CVE-2026-107220

  Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

  qax-os · excelize

  Medium6.5
• CVE-2026-107219

  Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

  qax-os · excelize

  High7.5
• CVE-2026-107218

  Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics

  qax-os · excelize

  Medium5.3
• CVE-2026-107217

  Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

  qax-os · excelize

  High7.5
• CVE-2026-107216

  Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

  qax-os · excelize

  High7.5