Skip to content
Threat Feed
Subscribe

Product

Excelize (>= 2.9.0, < 2.11.1-0.20260929015830-8ffeb07ec9a3)

1 brief RSS
medium advisory

Unbounded Decryption SpinCount Denial of Service in Excelize

An unbounded key-derivation loop in the Excelize library allows an attacker to trigger CPU exhaustion via a maliciously crafted EncryptionInfo stream in an OLE-formatted file.

excelize +6 denial-of-service vulnerability Go golang
2t 1c updated