GHSA-FQ3V-74GV-27GM Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

🗓️ 07 Oct 2026 20:22:49Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Unbounded <col max> attribute in Excelize causes DoS or OOM via flatCols().

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the flatCols() function in the Go language library for reading and writing Excel spreadsheets allows a hacker to cause a service failure.	8 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-107223	7 Oct 202620:05	–	circl
CVE	CVE-2026-107223	7 Oct 202618:48	–	cve
Cvelist	CVE-2026-107223 Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process	7 Oct 202618:48	–	cvelist
EUVD	EUVD-2026-94554	7 Oct 202618:48	–	euvd
Github Security Blog	Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process	7 Oct 202620:22	–	github
Mend	CVE-2026-107223	7 Oct 202618:48	–	mend
NVD	CVE-2026-107223	7 Oct 202619:17	–	nvd
Positive Technologies	PT-2026-107662	7 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-107223: Memory Allocation with Excessive Size Value	7 Oct 202600:00	–	rapid7

Source	Link
github	www.github.com/qax-os/excelize/security/advisories/GHSA-fq3v-74gv-27gm
github	www.github.com/qax-os/excelize/pull/2370
github	www.github.com/qax-os/excelize/commit/a54c578af309fa81f448143ed2b7a91192cc58a7
github	www.github.com/qax-os/excelize

07 Oct 2026 20:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 47.1

EPSS0.00317

Excelize DoS OOM flatCols()SetColWidth SetColStyle