{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libapache-poi-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NNAE14WHCAQCM9C6DTY4F7","modified_at":"2026-09-01T20:05:45.833063720Z","published_at":"2025-04-09T12:15:15.563Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-31672","https://security-tracker.debian.org/tracker/CVE-2025-31672"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-31672#Debian:13/libapache-poi-java","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-31672"}],"summary":"Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for m"}