Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process

Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)

Excelize: Negative shared-string index causes panic in GetCellValue and GetRows

Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation