qax-os vulnerabilities
18 published CVEs name qax-os among the affected products.
- 18Published CVEs18 of them scored
- 18Last 12 monthspublished in the last year
- 0Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107225
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
qax-os · excelize
Medium6.5 - CVE-2026-107224
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
qax-os · excelize
Medium6.5 - CVE-2026-107223
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
qax-os · excelize
High7.1 - CVE-2026-107222
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
qax-os · excelize
Medium6.5 - CVE-2026-107221
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
qax-os · excelize
Medium6.5 - CVE-2026-107220
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
qax-os · excelize
Medium6.5 - CVE-2026-107219
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
qax-os · excelize
High7.5 - CVE-2026-107218
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
qax-os · excelize
Medium5.3 - CVE-2026-107217
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
qax-os · excelize
High7.5 - CVE-2026-107216
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
qax-os · excelize
High7.5