Skip to content
Threat Feed
Subscribe

Product

Excelize (>= 2.8.1, < 2.11.1-0.20260911060113-Ea12859e43c6)

1 brief RSS
medium advisory

Unbounded Decryption SpinCount Denial of Service in Excelize

An unbounded key-derivation loop in the Excelize library allows an attacker to trigger CPU exhaustion via a maliciously crafted EncryptionInfo stream in an OLE-formatted file.

excelize +6 denial-of-service vulnerability Go golang
2t 1c updated