GitHub Advisoryadvisory · Maven

GHSA-j9rh-p96m-mhhp jOpenDocument has an improper restriction of XML external entity reference vulnerability

MEDIUM Published 2026-05-04 Modified 2026-05-08 Official page ↗
Aliases
CVE-2026-6501
Ecosystem
Maven
Packages
org.jopendocument:jOpenDocument
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-611
Reviewed
2026-05-08

Affected packages

• Maven org.jopendocument:jOpenDocument: <= 1.3 (no fix yet)

Description

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.

Related

Alias · CVE (1)

  • CVE-2026-6501 Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References