{"id":"GO-2026-6680","revision":"e4787e3a3a834d23af7ab54c7053a8bf","records":[{"revision":"e4787e3a3a834d23af7ab54c7053a8bf","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6680","aliases":["CVE-2026-107220","GHSA-g27h-8qhm-6pff"],"title":"Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize","description":"Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize","state":0,"publishedAt":"2026-11-05T22:53:46+00:00","modifiedAt":"2026-11-05T23:15:11.8918213+00:00","affected":[{"ecosystem":"Go","name":"github.com/xuri/excelize/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"2.7.1"},{"kind":"fixed","version":"2.11.1-0.20260820023833-99903a3240e5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/qax-os/excelize/security/advisories/GHSA-g27h-8qhm-6pff","https://github.com/qax-os/excelize/commit/99903a3240e58a47ff28fb8e05a03bd9d496ec24","https://github.com/qax-os/excelize/pull/2379"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6680","license":"OSV · upstream source license applies","key":"osv:GO-2026-6680","identifiers":["GO-2026-6680","CVE-2026-107220","GHSA-g27h-8qhm-6pff"]},"retained":false,"historicalAffected":[]}],"coverage":[]}