CVE-2026-107211

The Excelize Go language library (versions 2.8.1 to 2.11.0 ) contains a vulnerability where the extractPivotTableFields function fails to perform bounds checks when indexing the pivot-cache field-name slice. The issue arises because the library trusts the dataField fld attribute from getPivotCach...