CVE-2026-107303

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and companion ContentType values, return...

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

Summary Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects. The shared generated openFile helper creates an object URL from the Blob and opens it in a new window. For...

CVE-2026-107303 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and companion ContentType values, return...

CVE-2026-107303

Applications generated using JHipster prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0 are vulnerable to Stored XSS . The flaw exists in the generated openFile helper located at generators/client/generators/common/templates/src/main/webapp/app/shared/jhipster/data-utils.ts.ejs. Attacker...

CVE-2026-107303 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and companion ContentType values, return...

Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Opening a file whose first eight bytes are the OLE magic number sends excelize down the decryption path whether or not the caller set a password, or supports encrypted workbooks at all. openReaderAt excelize.go:198-215 branches on the header alone, and agileDecrypt calls convertPasswdToKey before...

Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Summary A Zip64 uncompressed-size of 2^63 casts to a negative int64 that bypasses the unzip-size guard and reaches makebyte, 0, negativeCap A Zip64 uncompressed-size in the range 2^63, 2^64 casts to a negative int64 in zip.File.FileInfo.Size, and ReadZipReader does signed arithmetic on that value...

GHSA-FW94-4WWP-W8PW Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Summary A Zip64 uncompressed-size of 2^63 casts to a negative int64 that bypasses the unzip-size guard and reaches makebyte, 0, negativeCap A Zip64 uncompressed-size in the range 2^63, 2^64 casts to a negative int64 in zip.File.FileInfo.Size, and ReadZipReader does signed arithmetic on that value...

CVE-2026-107219

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes...

CVE-2026-107224 Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and allocation. ReadZipReader obtains UncompressedSize64 throu...

CVE-2026-107224 Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and allocation. ReadZipReader obtains UncompressedSize64 throu...

CVE-2026-107219 Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes...

CVE-2026-107219 Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes...

CVE-2026-107219 Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes...

CVE-2026-107219

The Excelize Go language library (versions 2.3.1 to 2.11.0 ) is vulnerable to an uncontrolled resource consumption flaw (CWE-400) during the OpenFile operation. The agileDecrypt function accepts an attacker-controlled spinCount from a crafted OLE encrypted-workbook header and passes it to convert...

PT-2026-107657

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0 Description An issue exists in the agile decryption process where the library accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation...

CVE-2026-45521

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

A missing permission check in the openFile function of AppFuseBridge.java allows for local information disclosure on affected Android devices. This vulnerability can be exploited without additional execution privileges or user interaction. The issue is addressed in the 2026-09-01 (and 2026-09-05)...

EUVD-2026-74000

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...