Signals
Back to database
Schedule36Medium6.5VulnerabilityCVE-2026-107225No patch link observed

CVE-2026-107225 — Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets.

Published Oct 7, 2026, 07:17 PM UTCIngested 1d agoSource NVD(cve-db)CVE-2026-107225

Description

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that allow negative FillID, BorderID, and FontID values to reach slice indexing. When a crafted styles.xml supplies a negative fillId, borderId, or fontId and the application reads the style, a negative identifier passes the upper-bound-only predicate and becomes a negative slice index, allowing an attacker to panic while reading cell styling. No fixed version is available as of this review.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.5

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

None

Privileges Required

UI

Required

User Interaction

S

Unchanged

Scope

C

None

Confidentiality

I

None

Integrity

A

High

Availability

Affected

Vendor
Go
Product
github.com/xuri/excelize/v2

Versions

  • pkg:golang/github.com/xuri/excelize/v2 >= 2.8.0, < 2.11.1-0.20260731010303-ae2113b410e5

Stated as the source expressed them.

References

Related threats

same CWE or vendor
Medium

CVE-2026-107737 — SumatraPDF is a multi-format reader for Windows.

CVE-2026-107737 · 3h ago

High

CVE-2026-107734 — SumatraPDF is a multi-format reader for Windows.

CVE-2026-107734 · 3h ago

Critical

CVE-2026-107726 — Hazelcast is a unified real-time data platform combining stream processing with a fast data store.

CVE-2026-107726 · 4h ago

High

CVE-2026-107720 — fast-jwt provides fast JSON Web Token (JWT) implementation.

CVE-2026-107720 · 4h ago

Medium

CVE-2026-107717 — Banks generates meaningful LLM prompts using a simple template language.

CVE-2026-107717 · 4h ago

Medium

CVE-2026-107386 — amqp091-go is a Go AMQP 0.9.1 client.

CVE-2026-107386 · 7h ago