PT-2026-107645

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0 Description Insufficient structural and parameter validation occurs during the decryption dispatch process. The Decrypt function passes attacker-controlled EncryptionInfo and EncryptedPackage data into...

CVE-2026-56851: Undefined Security Weakness

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

PT-2026-107663

Name of the Vulnerable Software and Affected Versions Excelize versions 2.1.0 through 2.11.0 Description An issue exists when processing Zip64 entries where an uncompressed size with the high bit set ranging from 2^63 through 2^64-1 is converted from a uint64 to a negative int64. This conversion...

PT-2026-107646

Name of the Vulnerable Software and Affected Versions Excelize versions 2.3.1 through 2.11.0 Description The extractPart function allocates a byte slice using a CFB directory-entry size provided by the user before validating the sector chain or size domain. Specifically, the function trusts the...

PT-2026-107659

Name of the Vulnerable Software and Affected Versions Excelize versions 2.0.0 through 2.11.0 Description An issue exists in the checkRow function where the size of the target cell slice is determined by the last cell in the XML document order. If a crafted spreadsheet contains a row where a cell...

CVE-2026-107213: NULL Pointer Dereference

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...

PT-2026-107655

Name of the Vulnerable Software and Affected Versions github.com/xuri/excelize/v2 versions 2.0.0 through 2.11.0 github.com/xuri/excelize versions 1.1.0 through 1.4.1 Description An issue exists where the ColumnNameToNumber function accumulates a bijective base-26 value in an int64 without detecti...

Linux Distros Unpatched Vulnerability : CVE-2026-98373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when...

Linux Distros Unpatched Vulnerability : CVE-2026-56851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. CVE-2026-56851 Note that Nessu...

CVE-2026-107218: Improper Validation of Array Index

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where...

CVE-2026-96399

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399 Gitea denial of service through external issue tracker patterns

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399 Gitea denial of service through external issue tracker patterns

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399 Gitea denial of service through external issue tracker patterns

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

EUVD-2026-93921

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a runtime panic that terminated the Gitea process. A user who can edit a repository's external issue tracker settings...

CVE-2026-96399

The Gitea platform is vulnerable to a denial of service via a runtime panic. A repository's external issue tracker regular expression containing alternating capture groups can produce invalid slice indexes during the rendering of issue references. An attacker with permissions to edit a repository...

google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a...

CVE-2026-98371

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...