GO-2026-5960

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2026-5960

Import Source

https://vuln.go.dev/ID/GO-2026-5960.json

JSON Data

https://api.osv.dev/v1/vulns/GO-2026-5960

Aliases

Published

2026-07-27T15:30:50Z

Modified

2026-07-27T17:00:23.372522171Z

Summary

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) in github.com/xuri/excelize

Details

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) in github.com/xuri/excelize

Database specific

{
    "review_status": "REVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2026-5960"
}

References

Affected packages

Go / github.com/xuri/excelize/v2

Package

Name: github.com/xuri/excelize/v2; View open source insights on deps.dev
Purl: pkg:golang/github.com/xuri/excelize/v2

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.11.0

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/xuri/excelize/v2",
            "symbols": [
                "File.AddChart",
                "File.AddComment",
                "File.AddDataValidation",
                "File.AddFormControl",
                "File.AddHeaderFooterImage",
                "File.AddIgnoredErrors",
                "File.AddPicture",
                "File.AddPictureFromBytes",
                "File.AddPivotTable",
                "File.AddShape",
                "File.AddSlicer",
                "File.AddSparkline",
                "File.AddTable",
                "File.AutoFilter",
                "File.CalcCellValue",
                "File.CopySheet",
                "File.DeleteChart",
                "File.DeleteComment",
                "File.DeleteDataValidation",
                "File.DeleteFormControl",
                "File.DeletePicture",
                "File.DeletePivotTable",
                "File.DeleteSheet",
                "File.DeleteSlicer",
                "File.DeleteTable",
                "File.DuplicateRow",
                "File.DuplicateRowTo",
                "File.GetCellFormula",
                "File.GetCellHyperLink",
                "File.GetCellRichText",
                "File.GetCellStyle",
                "File.GetCellType",
                "File.GetCellValue",
                "File.GetColOutlineLevel",
                "File.GetColStyle",
                "File.GetColVisible",
                "File.GetColWidth",
                "File.GetConditionalFormats",
                "File.GetDataValidations",
                "File.GetFormControls",
                "File.GetHeaderFooter",
                "File.GetHyperLinkCells",
                "File.GetMergeCells",
                "File.GetPageLayout",
                "File.GetPageMargins",
                "File.GetPanes",
                "File.GetPictureCells",
                "File.GetPictures",
                "File.GetPivotTables",
                "File.GetRowHeight",
                "File.GetRowOutlineLevel",
                "File.GetRowVisible",
                "File.GetSheetProps",
                "File.GetSheetProtection",
                "File.GetSheetView",
                "File.GetSlicers",
                "File.GetTables",
                "File.GroupSheets",
                "File.InsertCols",
                "File.InsertPageBreak",
                "File.InsertRows",
                "File.MergeCell",
                "File.MoveSheet",
                "File.NewSheet",
                "File.NewStreamWriter",
                "File.ProtectSheet",
                "File.RemoveCol",
                "File.RemovePageBreak",
                "File.RemoveRow",
                "File.SetActiveSheet",
                "File.SetCellBool",
                "File.SetCellDefault",
                "File.SetCellFloat",
                "File.SetCellFormula",
                "File.SetCellHyperLink",
                "File.SetCellInt",
                "File.SetCellRichText",
                "File.SetCellStr",
                "File.SetCellStyle",
                "File.SetCellUint",
                "File.SetCellValue",
                "File.SetColOutlineLevel",
                "File.SetColStyle",
                "File.SetColVisible",
                "File.SetColWidth",
                "File.SetConditionalFormat",
                "File.SetHeaderFooter",
                "File.SetPageLayout",
                "File.SetPageMargins",
                "File.SetPanes",
                "File.SetRowHeight",
                "File.SetRowOutlineLevel",
                "File.SetRowStyle",
                "File.SetRowVisible",
                "File.SetSheetBackground",
                "File.SetSheetBackgroundFromBytes",
                "File.SetSheetCol",
                "File.SetSheetDimension",
                "File.SetSheetProps",
                "File.SetSheetRow",
                "File.SetSheetView",
                "File.SetSheetVisible",
                "File.UngroupSheets",
                "File.UnmergeCell",
                "File.UnprotectSheet",
                "File.UnsetConditionalFormat",
                "File.UpdateLinkedValue",
                "File.adjustHelper",
                "File.workSheetReader",
                "NewFile",
                "formulaFuncs.ANCHORARRAY",
                "formulaFuncs.FORMULATEXT",
                "formulaFuncs.INDIRECT",
                "formulaFuncs.ISFORMULA",
                "xlsxWorksheet.checkSheet"
            ]
        }
    ]
}

Database specific

source

"https://vuln.go.dev/ID/GO-2026-5960.json"