Maven/org.docx4j:docx4j-core CVE-2026-53752: high 7.5, EPSS 0.63%
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Action: Upgrade org.docx4j:docx4j-core to 11.5.14 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.5.14 | - |
Fixed versions
| 11.5.14 |
Sources
- osv: GHSA-gc95-3vw8-vg43
- https://github.com/plutext/docx4j/security/advisories/GHSA-gc95-3vw8-vg43
- https://github.com/plutext/docx4j
- https://github.com/plutext/docx4j/releases/tag/docx4j-11.5.14
CVE-2026-53752 · published · modified · JSON