GO-2026-6680

Source
https://pkg.go.dev/vuln/GO-2026-6680
Import Source
https://vuln.go.dev/ID/GO-2026-6680.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2026-6680
Aliases
Published
2026-11-05T22:53:46Z
Modified
2026-11-05T23:15:11Z
Summary
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize
Details

Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref in github.com/xuri/excelize

Database specific
{
    "review_status": "REVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2026-6680"
}
References

Affected packages

Go / github.com/xuri/excelize/v2

Package

Name
github.com/xuri/excelize/v2
View open source insights on deps.dev
Purl
pkg:golang/github.com/xuri/excelize/v2

Affected ranges

Type
SEMVER
Events
Introduced
2.7.1
Fixed
2.11.1-0.20260820023833-99903a3240e5

Ecosystem specific

{
    "imports": [
        {
            "path": "github.com/xuri/excelize/v2",
            "symbols": [
                "File.AddPicture",
                "File.AddPictureFromBytes",
                "File.AddPivotTable",
                "File.AddSlicer",
                "File.AddTable",
                "File.AutoFitColWidth",
                "File.CalcCellValue",
                "File.DuplicateRow",
                "File.DuplicateRowTo",
                "File.GetCellFormula",
                "File.GetCellRichText",
                "File.GetCellType",
                "File.GetCellValue",
                "File.GetMergeCells",
                "File.GetPictureCells",
                "File.GetPictures",
                "File.InsertCols",
                "File.InsertRows",
                "File.RemoveCol",
                "File.RemoveRow",
                "File.SetCellBool",
                "File.SetCellDefault",
                "File.SetCellFloat",
                "File.SetCellFormula",
                "File.SetCellHyperLink",
                "File.SetCellInt",
                "File.SetCellRichText",
                "File.SetCellStr",
                "File.SetCellUint",
                "File.SetCellValue",
                "File.SetSheetCol",
                "File.SetSheetRow",
                "formulaFuncs.ANCHORARRAY",
                "formulaFuncs.FORMULATEXT",
                "formulaFuncs.INDIRECT",
                "formulaFuncs.ISFORMULA",
                "xlsxWorksheet.mergeCellsParser"
            ]
        }
    ]
}

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6680.json"