GHSA-RXCJ-4PJ5-74GR Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Summary GetConditionalFormats reads sub-elements of a straight out of xl/worksheets/sheetN.xml and indexes them without checking length, and in one case without checking for nil. Three rule types are affected: cellIs, dataBar and colorScale. A workbook with a rule that is missing a child a real...

Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Summary GetConditionalFormats reads sub-elements of a straight out of xl/worksheets/sheetN.xml and indexes them without checking length, and in one case without checking for nil. Three rule types are affected: cellIs, dataBar and colorScale. A workbook with a rule that is missing a child a real...

CVE-2026-107222

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

EUVD-2026-94552

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

CVE-2026-107222 Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches...

PT-2026-107661

Name of the Vulnerable Software and Affected Versions Excelize versions 2.7.0 through 2.11.0 Description An issue exists when extracting conditional formats from a crafted worksheet. The GetConditionalFormats function fails to properly validate the structure of certain rules, specifically cellIs,...