Vulnerabilities

TI-2025-40368 CVE-2025-65482 · GHSA-7jc7-g598-2p64

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3…

HIGH 82

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2026-01-20 Fixed in 2.0.4 CWE-611

TI-2025-39540 CVE-2025-64087 · GHSA-r8w2-w357-9pjv

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of…

HIGH 82

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2026-01-20 Fixed in 2.2.0 CWE-1336

Vulnerabilities

Filters

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3…

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of…