{"action":"Upgrade org.apache.poi:poi-ooxml to 5.4.0 or later.","affected":[{"fixed":"5.4.0","introduced":"0"}],"component":"org.apache.poi:poi-ooxml","cve_ids":["CVE-2025-31672"],"ecosystem":"Maven","epss":0.01382,"exploited":false,"fixed_versions":["5.4.0"],"ghsa_id":"GHSA-gmg8-593g-7mv3","id":"tcs_01M5N8YH8ZE42AN6THZTB3GB6D","modified_at":"2026-09-10T03:50:23.912462504Z","published_at":"2025-04-09T12:30:24Z","references":["https://osv.dev/vulnerability/GHSA-gmg8-593g-7mv3","https://nvd.nist.gov/vuln/detail/CVE-2025-31672","https://bz.apache.org/bugzilla/show_bug.cgi?id=69620","https://github.com/apache/poi","https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5","https://security.netapp.com/advisory/ntap-20250523-0004","http://www.openwall.com/lists/oss-security/2025/04/08/2"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-gmg8-593g-7mv3","url":"https://osv.dev/vulnerability/GHSA-gmg8-593g-7mv3"}],"summary":"Apache POI OOXML Vulnerable to Improper Input Validation in OOXML File Parsing"}