CVE-2026-59162

Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0

Description Excelize is a Go language library used for reading and writing Microsoft Excel spreadsheets. The library parses shared-string cell values using the strconv.Atoi function but only verifies the upper bound before indexing the shared string slice. An attacker can provide an XLSX file containing a shared-string cell with a value of -1, which triggers an out-of-bounds index sharedStrings[-1] and causes a panic when the file is processed via the GetCellValue() or GetRows() functions.

Recommendations Update to version 2.11.0.