GHSA-g27h-8qhm-6pffPublished
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107220 · Microsoft / collected KEV context
cve-program · CVE-2026-107220
- https://github.com/qax-os/excelize/security/advisories/GHSA-g27h-8qhm-6pff
- https://github.com/qax-os/excelize/pull/2379
- https://github.com/qax-os/excelize/commit/99903a3240e58a47ff28fb8e05a03bd9d496ec24
euvd · EUVD-2026-94550
- https://github.com/qax-os/excelize/security/advisories/GHSA-g27h-8qhm-6pff
- https://github.com/qax-os/excelize/pull/2379
- https://github.com/qax-os/excelize/commit/99903a3240e58a47ff28fb8e05a03bd9d496ec24
nvd · CVE-2026-107220
- https://github.com/qax-os/excelize/commit/99903a3240e58a47ff28fb8e05a03bd9d496ec24
- https://github.com/qax-os/excelize/pull/2379
- https://github.com/qax-os/excelize/security/advisories/GHSA-g27h-8qhm-6pff
osv · GHSA-g27h-8qhm-6pff
- https://github.com/qax-os/excelize/security/advisories/GHSA-g27h-8qhm-6pff
- https://github.com/qax-os/excelize/pull/2379
- https://github.com/qax-os/excelize/commit/99903a3240e58a47ff28fb8e05a03bd9d496ec24
- https://github.com/qax-os/excelize
osv · GO-2026-6680
Related operational evidence
Explicit CVE identifiers- Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize · Newly collected advisory · 5 Nov 2026
- Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref · Advisory content revised · 5 Nov 2026