Skip to content
Threat Feed
Subscribe

Product

Excelize (< 2.11.1-0.20260930021559-01a9ff32fb3c)

1 brief RSS
medium advisory

Unbounded Decryption SpinCount Denial of Service in Excelize

An unbounded key-derivation loop in the Excelize library allows an attacker to trigger CPU exhaustion via a maliciously crafted EncryptionInfo stream in an OLE-formatted file.

excelize +6 denial-of-service vulnerability Go golang
2t 1c updated