EUVD-2026-94547

Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows...

CVE-2026-107217

The Excelize Go library (versions 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and 1.1.0 to 1.4.1 in github.com/xuri/excelize) is vulnerable to an integer overflow in the ColumnNameToNumber function. The library fails to detect overflows when accumulating a bijective base-26 value, allowing an ...