{"id":"GO-2026-6682","revision":"61bf1bf0625f4702a6fb7fded833d83a","records":[{"revision":"61bf1bf0625f4702a6fb7fded833d83a","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6682","aliases":["CVE-2026-107222","GHSA-rxcj-4pj5-74gr"],"title":"GetConditionalFormats indexes conditional-formatting rule sub-elements with no length / nil check in github.com/xuri/excelize","description":"GetConditionalFormats indexes conditional-formatting rule sub-elements with no length / nil check in github.com/xuri/excelize","state":0,"publishedAt":"2026-11-05T22:53:46+00:00","modifiedAt":"2026-11-05T23:15:11.8891758+00:00","affected":[{"ecosystem":"Go","name":"github.com/xuri/excelize/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"2.7.0"},{"kind":"fixed","version":"2.11.1-0.20260812075026-be7a16390fa6"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/qax-os/excelize/security/advisories/GHSA-rxcj-4pj5-74gr","https://github.com/qax-os/excelize/commit/be7a16390fa69c71d3ca618c741d1a2b5ed362cd","https://github.com/qax-os/excelize/pull/2375"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6682","license":"OSV · upstream source license applies","key":"osv:GO-2026-6682","identifiers":["GO-2026-6682","CVE-2026-107222","GHSA-rxcj-4pj5-74gr"]},"retained":false,"historicalAffected":[]}],"coverage":[]}