Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/10/07 8:23 p.m.•23 views

Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Opening a file whose first eight bytes are the OLE magic number sends excelize down the decryption path whether or not the caller set a password, or supports encrypted workbooks at all. openReaderAt excelize.go:198-215 branches on the header alone, and agileDecrypt calls convertPasswdToKey before...

7.5CVSS6AI score0.00363EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder