VYPR

docx4j

by Docx4j

CVEs (1)

  • CVE-2026-53752higAug 17, 2026
    risk 0.45cvss epss

    ### Summary docx4j's `PropertyResolver` and several adjacent helpers recursively walk the OpenXML style inheritance chain (`w:basedOn`) without cycle detection. A WordprocessingML document containing a cyclic style chain (for example, Style A based on B and Style B based on A)…