Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Summary GetConditionalFormats reads sub-elements of a straight out of xl/worksheets/sheetN.xml and indexes them without checking length, and in one case without checking for nil. Three rule types are affected: cellIs, dataBar and colorScale. A workbook with a rule that is missing a child a real...

GHSA-RXCJ-4PJ5-74GR Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

Summary GetConditionalFormats reads sub-elements of a straight out of xl/worksheets/sheetN.xml and indexes them without checking length, and in one case without checking for nil. Three rule types are affected: cellIs, dataBar and colorScale. A workbook with a rule that is missing a child a real...

PT-2026-107661

Name of the Vulnerable Software and Affected Versions Excelize versions 2.7.0 through 2.11.0 Description An issue exists when extracting conditional formats from a crafted worksheet. The GetConditionalFormats function fails to properly validate the structure of certain rules, specifically cellIs,...