GHSA-5H23-36RV-PM65 Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Summary File.GetStyle indexes the fill, border and font tables with values taken straight out of xl/styles.xml, and the conditions gating those lookups check only the upper bound. A workbook whose cellXfs entry carries fillId="-1", borderId="-1" or fontId="-1" reaches a negative slice index and...

Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml

Summary File.GetStyle indexes the fill, border and font tables with values taken straight out of xl/styles.xml, and the conditions gating those lookups check only the upper bound. A workbook whose cellXfs entry carries fillId="-1", borderId="-1" or fontId="-1" reaches a negative slice index and...