github.com/xuri/excelize vulnerabilities (Go)

3 vulnerabilities.

• github.com/xuri/excelize Go Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows CVE-2026-107217 Fix available 7.5 HighOctober 7, 2026
• github.com/xuri/excelize Go Excelize: Negative shared-string index causes panic in GetCellValue and GetRows CVE-2026-59162 Fix available 6.9 MediumJuly 10, 2026
• github.com/xuri/excelize Go Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation CVE-2026-59161 Fix available 8.7 HighJuly 10, 2026