{"id":"GO-2026-6674","summary":"Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize","details":"Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml in github.com/xuri/excelize","aliases":["CVE-2026-107225","GHSA-5h23-36rv-pm65"],"modified":"2026-11-05T23:15:11.901213538Z","published":"2026-11-05T22:53:46Z","database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-6674","review_status":"REVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/qax-os/excelize/security/advisories/GHSA-5h23-36rv-pm65"},{"type":"FIX","url":"https://github.com/qax-os/excelize/commit/ae2113b410e51f6a141c396a59eda8c42b91bc22"},{"type":"WEB","url":"https://github.com/qax-os/excelize/pull/2367"}],"affected":[{"package":{"name":"github.com/xuri/excelize/v2","ecosystem":"Go","purl":"pkg:golang/github.com/xuri/excelize/v2"},"ranges":[{"type":"SEMVER","events":[{"introduced":"2.8.0"},{"fixed":"2.11.1-0.20260731010303-ae2113b410e5"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6674.json"}}],"schema_version":"1.9.2"}