CVE-2026-107220

The Excelize Go language library (versions 2.7.1 to 2.11.0 ) contains a vulnerability where the mergeCellsParser fails to perform a length check when handling an empty mergeCell ref . Specifically, it passes an empty slice to cellInRange , which is then accessed by GetCellValue . An attacker can ...

CVE-2026-107220 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

CVE-2026-107220 Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...