{"action":"Upgrade org.docx4j:docx4j-core to 11.5.14 or later.","affected":[{"fixed":"11.5.14","introduced":"0"}],"component":"org.docx4j:docx4j-core","cve_ids":["CVE-2026-53752"],"ecosystem":"Maven","epss":0.0063,"exploited":false,"fixed_versions":["11.5.14"],"ghsa_id":"GHSA-gc95-3vw8-vg43","id":"tcs_01M5N8Y01Y16KSP02AYZT51PB3","modified_at":"2026-08-17T22:11:01.639227Z","published_at":"2026-08-17T21:55:49Z","references":["https://osv.dev/vulnerability/GHSA-gc95-3vw8-vg43","https://github.com/plutext/docx4j/security/advisories/GHSA-gc95-3vw8-vg43","https://github.com/plutext/docx4j","https://github.com/plutext/docx4j/releases/tag/docx4j-11.5.14"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gc95-3vw8-vg43","url":"https://osv.dev/vulnerability/GHSA-gc95-3vw8-vg43"}],"summary":"docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service"}