Skip to content
Threat Feed
Subscribe

Product

Excelize (>= 2.3.1, < 2.11.1-0.20260906004932-2badfcd5841d)

1 brief RSS
medium advisory

Unbounded Decryption SpinCount Denial of Service in Excelize

An unbounded key-derivation loop in the Excelize library allows an attacker to trigger CPU exhaustion via a maliciously crafted EncryptionInfo stream in an OLE-formatted file.

excelize +6 denial-of-service vulnerability Go golang
2t 1c updated