CyberSecBulletin

Org.docx4j vulnerabilities

We track 1 vulnerability in Org.docx4j products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Org.docx4j vulnerabilities

  • 7.5 High severity

    docx4j: Uncontrolled Recursion

    CVE-2026-53752Plutext

    docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including DOCX, PPTX, and XLSX files. Prior to 11.5.14, PropertyResolver and adjacent helpers recursively follow the WordprocessingML w:basedOn style inheritance chain wi