Maven package
org.docx4j/docx4j-core
pkg:maven/org.docx4j/docx4j-core
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-53752 | hig | — | < 11.5.14 | 11.5.14 | Aug 17, 2026 | ### Summary docx4j's `PropertyResolver` and several adjacent helpers recursively walk the OpenXML style inheritance chain (`w:basedOn`) without cycle detection. A WordprocessingML document containing a cyclic style chain (for example, Style A based on B and Style B based on A) |
- affected < 11.5.14fixed 11.5.14
### Summary docx4j's `PropertyResolver` and several adjacent helpers recursively walk the OpenXML style inheritance chain (`w:basedOn`) without cycle detection. A WordprocessingML document containing a cyclic style chain (for example, Style A based on B and Style B based on A)