CVE-2026-107213

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...

PT-2026-107644

Name of the Vulnerable Software and Affected Versions Excelize versions 2.9.0 through 2.11.0 Description A nil pointer dereference occurs when the GetSlicers function is called on a crafted worksheet. The issue arises because the function checks for the presence of an extLst element but fails to...