Threats affecting pkg:github/opensagres/xdocreport

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2025-65482xdocreport · XML External Entity (XXE) Critical9.8EPSS 0.6%2026-01-20CVE Database V5CVE-2025-65482 CVE-2025-65482 is a critical XML External Entity (XXE) vulnerability affecting opensagres XDocReport versions 0.9.2 through 2.0.3. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading a specially crafted . docx file. The vulnerability stems from improper handling of XML input, enabling malicious entity expansion and code execution without user interaction. With a CVSS score of 9.8, the impact on confidentiality, integrity, and availability is severe. EPSS 0.6%Vulnerability CWE-611	CVE Database V5	2026-01-20

Page 1 of 1