Headline
GHSA-7jc7-g598-2p64: XDocReport affected by an XML External Entity (XXE) vulnerability
An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.
Skip to content
Navigation Menu
AI CODE CREATION
GitHub CopilotWrite better code with AI
GitHub SparkBuild and deploy intelligent apps
GitHub ModelsManage and compare prompts
MCP RegistryNewIntegrate external tools
View all features
- Pricing
Provide feedback
Saved searches****Use saved searches to filter your results more quickly
Sign up
Appearance settings
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2025-65482
XDocReport affected by an XML External Entity (XXE) vulnerability
Critical severity GitHub Reviewed Published Jan 20, 2026 to the GitHub Advisory Database • Updated Jan 21, 2026
Package
maven fr.opensagres.xdocreport:fr.opensagres.xdocreport.document (Maven)
Affected versions
>= 0.9.2, < 2.0.4
Description
Published to the GitHub Advisory Database
Jan 20, 2026
Last updated
Jan 21, 2026
EPSS score