CVE-2026-107222

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional colorScale child without validating malformed rule structure. GetConditionalFormats reaches extractCondFmtCellIs and also indexes ColorScale.Cfvo, DataBar.Cfvo, and DataBar.Color without complete structural checks. When a crafted worksheet supplies a cellIs, dataBar, or colorScale rule missing expected children and the application calls GetConditionalFormats, missing formula, color, value-object, or colorScale data reaches an out-of-range index or nil dereference, allowing an attacker to panic and terminate an unprotected process. No fixed version is available as of this review.

• CWE-129
• CWE-476

• https://github.com/qax-os/excelize/commit/be7a16390fa69c71d3ca618c741d1a2b5ed362cd
• https://github.com/qax-os/excelize/pull/2375
• https://github.com/qax-os/excelize/security/advisories/GHSA-rxcj-4pj5-74gr

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107217Excelize is a Go language library for reading and writing Mi…7.5
• CVE-2026-107218Excelize is a Go language library for reading and writing Mi…5.3
• CVE-2026-107219Excelize is a Go language library for reading and writing Mi…7.5
• CVE-2026-10722A vulnerability has been found in cilium ebpf up to 0.21.0. …5.5
• CVE-2026-107220Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107221Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107223Excelize is a Go language library for reading and writing Mi…7.1
• CVE-2026-107224Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-107225Excelize is a Go language library for reading and writing Mi…6.5
• CVE-2026-10723BIND may accept incorrect child-zone NSEC3 records as valid,…6.8
• CVE-2026-10724The Reviews Feed WordPress plugin before 2.6.5 does not neu…4.8
• CVE-2026-10725Protocol::HTTP2 versions before 1.13 for Perl is vulnerable …7.5