{"id":"GO-2026-6679","revision":"651d17325c924e1897dcfa0bb03f5667","records":[{"revision":"651d17325c924e1897dcfa0bb03f5667","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6679","aliases":["CVE-2026-107224","GHSA-fw94-4wwp-w8pw"],"title":"Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize","description":"Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader in github.com/xuri/excelize","state":0,"publishedAt":"2026-11-05T22:53:46+00:00","modifiedAt":"2026-11-05T23:15:11.8794041+00:00","affected":[{"ecosystem":"Go","name":"github.com/360EntSecGroup-Skylar/excelize/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"2.1.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/xuri/excelize/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.11.1-0.20260805032953-db93f8d89de7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/qax-os/excelize/security/advisories/GHSA-fw94-4wwp-w8pw","https://github.com/qax-os/excelize/commit/db93f8d89de71589069a54d1b998af02e3c5f7cd","https://github.com/qax-os/excelize/pull/2369"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6679","license":"OSV · upstream source license applies","key":"osv:GO-2026-6679","identifiers":["GO-2026-6679","CVE-2026-107224","GHSA-fw94-4wwp-w8pw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}