{"id":"GO-2026-6674","revision":"a14fe9939462474a8d711a5322a0b74c","records":[{"revision":"a14fe9939462474a8d711a5322a0b74c","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6674","aliases":["CVE-2026-107225","GHSA-5h23-36rv-pm65"],"title":"Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize","description":"Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize","state":0,"publishedAt":"2026-11-05T22:53:46+00:00","modifiedAt":"2026-11-05T23:15:11.9012135+00:00","affected":[{"ecosystem":"Go","name":"github.com/xuri/excelize/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"2.8.0"},{"kind":"fixed","version":"2.11.1-0.20260731010303-ae2113b410e5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/qax-os/excelize/security/advisories/GHSA-5h23-36rv-pm65","https://github.com/qax-os/excelize/commit/ae2113b410e51f6a141c396a59eda8c42b91bc22","https://github.com/qax-os/excelize/pull/2367"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6674","license":"OSV · upstream source license applies","key":"osv:GO-2026-6674","identifiers":["GO-2026-6674","CVE-2026-107225","GHSA-5h23-36rv-pm65"]},"retained":false,"historicalAffected":[]}],"coverage":[]}