CVE-2026-107218

Name of the Vulnerable Software and Affected Versions Excelize versions 2.10.1 through 2.11.0

Description An issue exists in the formula evaluation process where the RIGHT function handles text length inconsistently. The software validates the requested length using UTF-16 code-unit counts via the countUTF16String function but performs slicing on a rune array using Unicode code-point counts via utf8.RuneCountInString. When processing supplementary-plane text (characters above U+FFFF) with a requested character count that falls between the rune count and the UTF-16 code-unit count, the discrepancy results in a negative rune-slice index. This leads to a program panic during formula evaluation. This behavior can be triggered through the CalcCellValue function or via AutoFitColWidth in version 2.11.0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.