GO-2026-6676Published
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107221 · Microsoft / collected KEV context
cve-program · CVE-2026-107221
- https://github.com/qax-os/excelize/security/advisories/GHSA-8mcq-6wmr-jrjv
- https://github.com/qax-os/excelize/pull/2376
- https://github.com/qax-os/excelize/commit/46a5eb289448e40fbc7d3294589b03861fb822f0
euvd · EUVD-2026-94551
- https://github.com/qax-os/excelize/security/advisories/GHSA-8mcq-6wmr-jrjv
- https://github.com/qax-os/excelize/pull/2376
- https://github.com/qax-os/excelize/commit/46a5eb289448e40fbc7d3294589b03861fb822f0
nvd · CVE-2026-107221
- https://github.com/qax-os/excelize/commit/46a5eb289448e40fbc7d3294589b03861fb822f0
- https://github.com/qax-os/excelize/pull/2376
- https://github.com/qax-os/excelize/security/advisories/GHSA-8mcq-6wmr-jrjv
osv · GHSA-8mcq-6wmr-jrjv
- https://github.com/qax-os/excelize/security/advisories/GHSA-8mcq-6wmr-jrjv
- https://github.com/qax-os/excelize/pull/2376
- https://github.com/qax-os/excelize/commit/46a5eb289448e40fbc7d3294589b03861fb822f0
- https://github.com/qax-os/excelize
osv · GO-2026-6676
Related operational evidence
Explicit CVE identifiers- Panic on out-of-order cell column references when reading worksheets in github.com/xuri/excelize · Newly collected advisory · 5 Nov 2026
- Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API · Advisory content revised · 5 Nov 2026