Security Advisory

CVE-2026-59162

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-10 15:51:26

Last updated 2026-07-10 18:40:25

Assigner GitHub_M

CVSS score 6.9

State PUBLISHED

Description

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixed in version 2.11.0.

← Browse all CVEs View on cve.org ↗