CVE-2026-107221

Name of the Vulnerable Software and Affected Versions Excelize versions 2.0.0 through 2.11.0

Description An issue exists in the checkRow function where the size of the target cell slice is determined by the last cell in the XML document order. If a crafted spreadsheet contains a row where a cell appearing earlier in the document references a higher column than the final cell, the column index exceeds the slice length. This occurs when a non-streaming worksheet API, such as GetCellValue(), GetCellFormula(), CalcCellValue(), GetMergeCells(), or SetCellValue(), is used to read the sheet. An attacker can exploit this by providing a specially crafted file to cause an unrecovered panic, leading to a process crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.