GO-2026-6681Published
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107219 · Microsoft / collected KEV context
cve-program · CVE-2026-107219
- https://github.com/qax-os/excelize/security/advisories/GHSA-jrfj-fhj2-jjvm
- https://github.com/qax-os/excelize/pull/2389
- https://github.com/qax-os/excelize/commit/2badfcd5841d0d88b0ffea119f5a2f3c53b4910b
euvd · EUVD-2026-94549
- https://github.com/qax-os/excelize/security/advisories/GHSA-jrfj-fhj2-jjvm
- https://github.com/qax-os/excelize/pull/2389
- https://github.com/qax-os/excelize/commit/2badfcd5841d0d88b0ffea119f5a2f3c53b4910b
nvd · CVE-2026-107219
- https://github.com/qax-os/excelize/commit/2badfcd5841d0d88b0ffea119f5a2f3c53b4910b
- https://github.com/qax-os/excelize/pull/2389
- https://github.com/qax-os/excelize/security/advisories/GHSA-jrfj-fhj2-jjvm
osv · GHSA-jrfj-fhj2-jjvm
- https://github.com/qax-os/excelize/security/advisories/GHSA-jrfj-fhj2-jjvm
- https://github.com/qax-os/excelize/pull/2389
- https://github.com/qax-os/excelize/commit/2badfcd5841d0d88b0ffea119f5a2f3c53b4910b
- https://github.com/qax-os/excelize
osv · GO-2026-6681
Related operational evidence
Explicit CVE identifiers- Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile in github.com/xuri/excelize · Newly collected advisory · 5 Nov 2026
- Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile · Advisory content revised · 5 Nov 2026