CVE-2026-107212: Go Xml Row Index Without Limit Checkcve-2026-107212-go-xml-row-index-without-limit-check
A row number parsed from an untrusted worksheet XML attribute is written into the iterator's current-row state under a plain "$ROW != 0" guard, with no upper-bound check against the maximum row limit. A crafted worksheet that places an oversized row number after a valid row makes the iterator jump to the attacker-chosen row index and advance through every mi
