https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:41:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335730 EUVD-2026-335730 https://cve.radiocsirt.org/vuln/euvd-2026-335730 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59162 <p>Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixed in version 2.11.0.</p> <p>Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with -1 to trigger sharedStrings[-1] and panic when read through GetCellValue or GetRows. This issue is fixed in version 2.11.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59162 https://cve.radiocsirt.org/vuln/ghsa-fx5j-qcqg-grpf <p><strong>Affected:</strong> Go: github.com/xuri/excelize/v2, Go: github.com/xuri/excelize</p> <p># Negative shared-string index causes panic in GetCellValue and GetRows</p> <p>## Summary</p> <p>Excelize parses shared-string cell values with `strconv.Atoi` and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with `&lt;v&gt;-1&lt;/v&gt;`, the parsed index is negative. The upper-bound check still passes (`len(sharedStrings) &gt; -1`), and Excelize indexes `sharedStrings[-1]`, causing a runtime panic.</p> <p>This was reproduced on the current default branch commit `1213a8bd7c5ab360554603ac5c995ccaf6eb4314` and the latest release tag `v2.10.1` (`5ad5ab3af0054c55bdce09f1530085600e9f2e45`). The issue is independent from the row-bound allocation report, so I am reporting it separately.</p> <p>## Affected package</p> <p>- Package: `github.com/xuri/excelize/v2` - Tested affected versions: current default branch at `1213a8bd7c5ab360554603ac5c995ccaf6eb4314`, and release `v2.10.1` - Fixed version: none known at the time of this report</p> <p>## Impact</p> <p>An attacker who can provide an XLSX file to an application using Excelize can trigger a process panic when the application reads the malicious cell through common APIs such as `GetCellValue` or `GetRows`. In services that parse untrusted spreadsheets without a panic recovery boundary, this can cause denial of service.</p> <p>## Root cause</p> <p>For shared-string cells (`t=&#34;s&#34;`), `xlsxC.getValueFrom()` parses the cell value as a shared-string index and only checks whether the index is below `len(d.SI)` before indexing:</p> <p>```go xlsx…</p> <p><strong>Affected:</strong> Go: github.com/xuri/excelize/v2, Go: github.com/xuri/excelize</p> <p># Negative shared-string index causes panic in GetCellValue and GetRows</p> <p>## Summary</p> <p>Excelize parses shared-string cell values with `strconv.Atoi` and checks only the upper bound before indexing the shared string slice. If an XLSX file contains a shared-string cell with `&lt;v&gt;-1&lt;/v&gt;`, the parsed index is negative. The upper-bound check still passes (`len(sharedStrings) &gt; -1`), and Excelize indexes `sharedStrings[-1]`, causing a runtime panic.</p> <p>This was reproduced on the current default branch commit `1213a8bd7c5ab360554603ac5c995ccaf6eb4314` and the latest release tag `v2.10.1` (`5ad5ab3af0054c55bdce09f1530085600e9f2e45`). The issue is independent from the row-bound allocation report, so I am reporting it separately.</p> <p>## Affected package</p> <p>- Package: `github.com/xuri/excelize/v2` - Tested affected versions: current default branch at `1213a8bd7c5ab360554603ac5c995ccaf6eb4314`, and release `v2.10.1` - Fixed version: none known at the time of this report</p> <p>## Impact</p> <p>An attacker who can provide an XLSX file to an application using Excelize can trigger a process panic when the application reads the malicious cell through common APIs such as `GetCellValue` or `GetRows`. In services that parse untrusted spreadsheets without a panic recovery boundary, this can cause denial of service.</p> <p>## Root cause</p> <p>For shared-string cells (`t=&#34;s&#34;`), `xlsxC.getValueFrom()` parses the cell value as a shared-string index and only checks whether the index is below `len(d.SI)` before indexing:</p> <p>```go xlsx…</p> https://cve.radiocsirt.org/vuln/ghsa-fx5j-qcqg-grpf