CVE-2026-53752
- Source
- https://cve.org/CVERecord?id=CVE-2026-53752
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53752.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-53752
- Aliases
- Published
- 2026-09-14T17:31:07Z
- Modified
- 2026-09-18T08:10:19Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
- Details
-
docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including DOCX, PPTX, and XLSX files. Prior to 11.5.14, PropertyResolver and adjacent helpers recursively follow the WordprocessingML w:basedOn style inheritance chain without cycle detection. A well-formed DOCX containing mutually based styles causes unbounded recursion in PropertyResolver.fillPPrStack and related effective-style resolution paths, resulting in StackOverflowError. Server-side conversion and table-of-contents processing of an untrusted document can terminate a worker thread, degrade a thread pool, or deny service, although isolation in disposable workers or safe containment of StackOverflowError can reduce the practical effect. The fix adds cyclic-style tracking and CyclicStylesException handling. This issue is fixed in version 11.5.14.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-674", "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53752.json" }- References
-
- https://github.com/plutext/docx4j/releases/tag/docx4j-11.5.14
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53752.json
- https://github.com/plutext/docx4j/security/advisories/GHSA-gc95-3vw8-vg43
- https://nvd.nist.gov/vuln/detail/CVE-2026-53752
- https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f
- https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06
Affected packages
Git / github.com/plutext/docx4j
Affected versions
docx4j-11.*
docx4j-11.4.10
docx4j-11.4.11
docx4j-11.5.10
docx4j-11.5.11
docx4j-11.5.12
docx4j-11.5.13
docx4j-11.5.3
docx4j-11.5.4
docx4j-11.5.5
docx4j-11.5.6
docx4j-11.5.7
docx4j-11.5.8
docx4j-11.5.9
docx4j-2.*
docx4j-2.8.0
docx4j-2.8.1
docx4j-3.*
docx4j-3.0.0
docx4j-3.0.1
docx4j-3.1.0
docx4j-3.2.0
docx4j-3.2.1
docx4j-3.2.2
docx4j-3.3.1
docx4j-3.3.2
docx4j-3.3.3
docx4j-3.3.4
docx4j-3.3.5
docx4j-3.3.6
docx4j-3.3.7
docx4j-6.*
docx4j-6.0.0
docx4j-6.0.1
docx4j-6.1.0
docx4j-6.1.1
docx4j-6.1.2
docx4j-parent-11.*
docx4j-parent-11.1.0
docx4j-parent-11.1.2
docx4j-parent-11.1.3
docx4j-parent-11.1.7
docx4j-parent-11.1.8
docx4j-parent-11.2.5
docx4j-parent-11.2.8
docx4j-parent-11.2.9
docx4j-parent-11.3.2
docx4j-parent-11.4.5
docx4j-parent-11.4.6
docx4j-parent-11.4.7
docx4j-parent-11.4.8
docx4j-parent-11.5.0
docx4j-parent-11.5.1
docx4j-parent-11.5.2
docx4j-parent-8.*
docx4j-parent-8.0.0
docx4j-parent-8.1.0
docx4j.*
docx4j.NET_3.3.2.1
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53752.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"280519060375843744562297179608171019043",
"262274061368740046687241096854766424355",
"178127871962888068571010698218502576839",
"321957883301755578763497206731448244056",
"115040309301807102745522730460105199851",
"161034539446922165375643676447163638045",
"55771931693123418571065961130708967691",
"278299640067934575175355654904485698478",
"192630957990124255342194085518770415776",
"326929135866388794862233373128699459482",
"198405477267532136100668029745540230587",
"93191330831786766436492864027978999830",
"322763332076091277879254086055760458636",
"121889947047287848729477657989414257892",
"157768892455506989619026394843786681209",
"111446322057699412448201989544697557889",
"334719541547707352216017348152706229938",
"68529037399089274395452464261465010280",
"50491919249395911930212920378504994442",
"293218487402165440493090956460738419385",
"340003063997849848966956869398954683086",
"135476917568541770371296813333196325539",
"311438512654527764736095548990412580028",
"218517860950998934035241366080423471592",
"171966820480598735843129815766763887989",
"176951898081164030723535736953789720026",
"89291818151266576421044297622376165125",
"192171753317276680032403723748131316272"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-0505692c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "24613560233047016535892289466071329727",
"length": 49
},
"id": "CVE-2026-53752-05a05cdc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "getPropertyResolver"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "164369124530504902306738332593814489615",
"length": 717
},
"id": "CVE-2026-53752-0891bc0c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10832598363897527349824181528379961169",
"length": 89
},
"id": "CVE-2026-53752-0a9dd3b3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10900626317447901510957891935444852993",
"length": 159
},
"id": "CVE-2026-53752-0f235490",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java",
"function": "StyleTree"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "310342856385327012445916888333000819302",
"length": 1846
},
"id": "CVE-2026-53752-10007e05",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchProcessor.java",
"function": "processSwitches"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "149540886818800791819309812536689202915",
"length": 336
},
"id": "CVE-2026-53752-1364cf72",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "addNormalToResolvedStylePPrComponent"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234236304726776955582718685039422633928",
"length": 491
},
"id": "CVE-2026-53752-160eec58",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java",
"function": "export"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"281072600938567511912431188145547960399",
"36627913923395080548418877362472800634",
"183281085327533173434160133224914703900",
"243889929946349593463486343437878646895",
"66218783378445396752440122023983356822",
"327634620679729676263047389766234190124",
"67853557070290067185680431596912925151",
"139840527962803757866273063442791032881",
"266255401935150798098134235442835051631"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-16515754",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/NumberingDefinitionsPart.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"338560353499916776739650905301911944952",
"188164723139909894367715622587455348405",
"333522582814235061899766147500293477720",
"256021090292594475619016014005488383561",
"118417514213516561289774139488954349724",
"75904508016748519969130930159288184783",
"88248165001246578537253267275136805599",
"319583027049104496556594954078787257257",
"178103129201521667433681200533778228095",
"308377341460770146707545578603077146013",
"140386269849598198236300771242683660001",
"101807766061997769233667132742849473809",
"85872795846285181978626002399999179381",
"170229451666466191917448100666612718840",
"191664064838371997165490746402621295313",
"4244856913378538661803208980761093186",
"142291063344172350489011503717760126728"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-18e9d857",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocGenerator.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "204262342615268088972087519696913429328",
"length": 3352
},
"id": "CVE-2026-53752-221fa419",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java",
"function": "apply"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "20951000308934965234143969356482547698",
"length": 332
},
"id": "CVE-2026-53752-2242f9d5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "300734909064279279856513750190921929379",
"length": 2176
},
"id": "CVE-2026-53752-228cb519",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "fillPPrStack"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "170960140921248029974385710090401883615",
"length": 1499
},
"id": "CVE-2026-53752-22cb8411",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "setEntryValue"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "262303098872087158066724094014854727917",
"length": 2275
},
"id": "CVE-2026-53752-23848c7d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java",
"function": "init"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "172432463292473176098356919096816397269",
"length": 136
},
"id": "CVE-2026-53752-25110b29",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/datastorage/BindingHyperlinkResolver.java",
"function": "activateHyperlinkStyle"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"19701879847538221858245128088462585899",
"144122434077075931222674710304397776453",
"140260836519018487436849975543628970655",
"63581472406686162597383947651970831368",
"170320559293221803374053938404759385225",
"312562848302439105297347624197274631048",
"295884640990139669774052089935186085920",
"23546187863622651592562536361430632143",
"69306197920486270761343260886985240353",
"188532225723917000472577455814559434075",
"250289348079374519407887133507580053781",
"205603537307081757755652444999170471534",
"292918697149770867909737514629688643417",
"98448343750191024747941411277425964816",
"235040819197860383261894759748491100030",
"339918662927399029430324515698361144787",
"298397031063287548147562580687876974890",
"263677587525863763861192838367736951517",
"84356262334660576928398883517328638711",
"286216334514778868887853930347825392365",
"7969967315771171558229005765337435346",
"244175757418755889525953309700412356180",
"6686061359120989465523395812657870820",
"34001466659693552362795323482519089392",
"185972466899585556704627052780388129419",
"55141687307281792006063622922518346690",
"246996233048056217537468503360968809940",
"69874406470610078939564357786446895683",
"48003022724541580422864283396166123420",
"153132481010430415114654736737990002762",
"44795473852180557170511691801250246867",
"224439982925284172418601805376314767553",
"131218965689011645520748226479146804964",
"139913355187527065012448200732475929448",
"100508147485741307303483865847556934923",
"281763902132906981973550549220840631281",
"211772050065044952644201231994722922828",
"79189193438101190396077020867773119292",
"170675472791047991515977787457396934128",
"11524769738988185369489541379180780922",
"137019256591065207292751109536653947432",
"293525936670932243523751206441131492835",
"185742588301101449274538573712089821225",
"301543193553851985494743107988250550034",
"197047187622232130911516558383867450206",
"112951084082890685153699630833275799191",
"209617027798030487172960820785662965081",
"23487602818260407931151901244986371040",
"295381454427161479212239311917044936403",
"231172949339159094801152861127536652299",
"120079880608511456687554338161682225630",
"190257673706642161928083430628261735656",
"178003405956949469604753236806200366467",
"311529713071590944002699224176841918725",
"53568501930141863014988215859045683829",
"339218059852493915057410780665977960171",
"250701466828453587388469152530371260387",
"7638526237531838040435189402115172125",
"278466860885045038532565239654700360898",
"142972892442058847528943288343438875930",
"105606608000237806630422723457359963633",
"52265803035260056378472452385846688955",
"5536980929576138715540305763080644241",
"290951143400383243952767565042583060543",
"314168205584520571880402781242825935104",
"178937549710388077183338547290399335169",
"262564678468494466494049400073443098584",
"94858852904707172452238592816000249514",
"307143771534879103974157752241246504903",
"160573628535794025121709518220833055777",
"281702536848079521503167546744853526693",
"95886540698865002602242077683452111154",
"176172515881134113282437876204095149938",
"185927736476710914740375644137478119099",
"180955531967879706445449176272932334047",
"35457888716543013023501845141004867414",
"277866847440250423418883186653972579484",
"220930396985614472667763678414332838776",
"161486038462326346602102574627900308042",
"25221731137468990357912082586085811676",
"142280312595639418846059657484183049163",
"35478843844411214058152612709276577795",
"267359897470478367842943523342787400776",
"244856027285919608649073146382293284835",
"37273276420189389202206453669260614307",
"234223771119004324160820721370356275898",
"339412762551205267507324915612672588157",
"79462923505475329287876291358500672256",
"90705740419707122225680543975170977053",
"134038378235410556913332708175226314249",
"99956117768201816283547138594359027824",
"158775950973244716420448421803966438138",
"168877070843166558705089833301096419203",
"197511887791103174976260973969448010879",
"294608768347870665908824969913975620605",
"43210194581641067095519922596597886218",
"50987822233658563644117709436469490642",
"329142441974100450687912940587868277190",
"278261552769386682597820303413028924731",
"280835455777416276136202879505097033822",
"157659596160553377745849543302850140210",
"229514693470685983530009760505443038217",
"100493673717102736683012633681787629914",
"44106643537744172964948194162104089154",
"213687089893203468672977675833879479533",
"279163625393723940884368495532720272307",
"101528678828460896843491655088148075115",
"229851588512522049053931821369728770320",
"14527226639935187960866468002606494230",
"148106304279713312157341834398668507062",
"56952911610510940591277185143992132000",
"151953934536232343728304363186891548518",
"90066763549658818898981731938962400341",
"271020718437618511917107405431079012147",
"123586545296683514942293562941150300805",
"54049507557066875669090930720192038452",
"171239327131395889700200505104270301113",
"254896775202068364485575230457981521733",
"39959861342753612744002252995574534851",
"16637617885712247042791083427640738066",
"259736764093812526252268733165444167456",
"333353825092295953131519613591589170290",
"65680800087064282838353706437714963600",
"93345533253634212143160581461776642290",
"77175084929484094636620114938862484837",
"211772050065044952644201231994722922828",
"120104491458905757447408302096804840031",
"119796866826364700637754299315135391554",
"3480991618040476709744762920115054039",
"242912431081359342462624899909814135677",
"69874406470610078939564357786446895683",
"48003022724541580422864283396166123420",
"2017574181962733575826759477930419389",
"330479069338276441715402728110620607265",
"159214407742098870975770348019105576883",
"291735606371773700633746173715553562740",
"88075202495704827458314931405453781817",
"211772050065044952644201231994722922828",
"81996477993963627020307751955673270612",
"190380811652949418028129571451386026716",
"77213929274660490341961717634418732019",
"135567837238881301794526896203497149730",
"101460903222255454887575039843811423567",
"17008118679446444518006520633791247162",
"145610108764528158326345861630057978309",
"323312155769964607872785118250509805736",
"262104342387317424365877415740040254755"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-2943c577",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19786531076233496854382936282202243887",
"length": 976
},
"id": "CVE-2026-53752-2985f94f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java",
"function": "getCssForStyles"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "95934799845865942412493201699776816744",
"length": 653
},
"id": "CVE-2026-53752-2dd2dc1c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveRPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"11672205691784703346216625015542697810",
"207033198082807438808003420726539568739",
"122810297273151571229326526322945181040",
"249361539549485477748540121035431902271",
"146932160655349993147339284040971509973",
"246500552251656298363732807925134923881",
"203043292433363569778087932043612875552",
"322926521109634292650033453600344296668",
"51495835307693228525658890255964003542",
"63568292199145409602618075695442521850",
"42667320669243723769845393233864809345",
"116694724070065349401549443679181278893",
"77159204545640827713828927399307831265",
"151815637017160181775503288732636540814",
"24077315318143505419347297473749097548",
"338956871600442535794087571834367454082",
"173693814410713435639633021390972280086",
"122558130401736322645543963183238800128",
"285258008150577390668318792189042535571",
"130124265413790742624015468231634890215"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-2e22a86e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97727049433195577772835934391635396100",
"length": 801
},
"id": "CVE-2026-53752-2ec2c3a0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "addObject"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"270559909718962736784481953156589324507",
"176574976985889510739849352613284315366",
"21937381514582170995566720012414712064",
"19773442415621025890766676019272430426",
"36998552974075043146012232233110340358",
"175679820023950934404222861507489174561",
"281596782401545081968411974693979272084",
"269332913035854613587200866621362999535"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-31b3de6d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/AbstractFOExporter.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "273646963167134975677014380563869482267",
"length": 535
},
"id": "CVE-2026-53752-34cdf004",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "addDefaultParagraphFontToResolvedStyleRPrComponent"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "196414050557282193978269778266734791443",
"length": 261
},
"id": "CVE-2026-53752-36228aa2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "generateTocEntry"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"118887342723040886442811195442653426805",
"155064988441642294330875664266545104535",
"327326898402174807948821071502153015122",
"24671552308050685362312344887239714",
"298240208155962510927963107993464236753"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-36c42daa",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/OSwitch.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"162533882578919513677332138186743373365",
"187180588165953918972607900157530173101",
"62907869291434619501765878567916315596",
"328301064918330440945332848047235871377",
"166301251590750761047336295096659739474",
"271048667134413440263612951012747758728"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-389fce53",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleUtil.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "61749932979665072386072489514992905765",
"length": 1134
},
"id": "CVE-2026-53752-38acc939",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java",
"function": "addNode"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"62338778388789721892122034529883963604",
"250763787680819198820823065949059007165",
"83229996818358059644711751407543191539",
"249978363972308081259650594046874377960",
"177153819700550149382248943295318742152",
"235321144698902742929535626782637865590",
"127968754454577439054951661505792580071",
"143243779528725214432294111484058980975",
"284252947092290360770500409204806888184",
"279732227477014040206560818771197446448",
"99651601834455703182470614174401242363",
"291220266283144241601833660516103619569"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-3b0f0f2a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "328187433594831821588767939571698119570",
"length": 4645
},
"id": "CVE-2026-53752-3b3ba7c0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java",
"function": "handlePPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "304402472377354276892834842589351826470",
"length": 2662
},
"id": "CVE-2026-53752-403ede14",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java",
"function": "getNumber"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"9925323005422879024824745455373723232",
"132810953892010709715346339623635626818",
"337196029054364516598783715268906738910",
"134232492470134579857757291978000785127",
"67974215439087331572684191405359286160",
"308988026208272180153350350310786878175",
"19901627105986824424140116507181035716",
"23397732468660652435287898750195894198",
"35304258638551550897797011445548600957",
"194376468174291855353439159644572330315",
"260259223734737344017940439062247158041",
"892481793836132953622128208253386023"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-41d04004",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "53113594727165779834066166996296211698",
"length": 319
},
"id": "CVE-2026-53752-41f7ce0b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "createStyledParagraphOfText"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "307569856137210492249796790455166695824",
"length": 3192
},
"id": "CVE-2026-53752-429d546e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java",
"function": "groupContent"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "20862310362286150308797813453254494120",
"length": 433
},
"id": "CVE-2026-53752-4b58c0ca",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java",
"function": "handleRPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "334325895845409658725840469164590392855",
"length": 1088
},
"id": "CVE-2026-53752-4fd9544b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java",
"function": "apply"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "79945588158999406904509710608054747162",
"length": 1175
},
"id": "CVE-2026-53752-514717d2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveRPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219231811641259964493742062828386895990",
"length": 288
},
"id": "CVE-2026-53752-51f02919",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java",
"function": "AbstractWmlConversionContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "129278708615854190871717707057576182740",
"length": 1468
},
"id": "CVE-2026-53752-5300fc1c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "99293922945637904501425971560221865668",
"length": 156
},
"id": "CVE-2026-53752-54e7ab99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java",
"function": "HTMLConversionContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "130663751063761852621977076620970746628",
"length": 1926
},
"id": "CVE-2026-53752-551727bb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/TableWriter.java",
"function": "applyTableCustomAttributes"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"322195013249723838320955348525555369838",
"75634620474353424733295652117585416190",
"85691221170756659356744716631308248973",
"60672942067684420865650017330188522433",
"305827380688286306260854669648573405949",
"169945926040760319504034102112570053342",
"17162186364532511060342187327948433442"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-574633c2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractExporter.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "36026856746205558920938203635939418225",
"length": 971
},
"id": "CVE-2026-53752-5d488570",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveRPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"218137181989403271802443474623290286762",
"198127232981129938961982328799340532968",
"8955977469081014843620236616841155964",
"186022389895421542052790169874248484577",
"260053606824594116777706055537244490558",
"212057315828823140991052003898251817397",
"94639171912656516940752224811335255446",
"91085182055249280624758779900657847614",
"102762003798062955487862012851568123982",
"236362841469999090254965717586888602935",
"99321431072810291865624673481962371879",
"247101705229661528927649294924120622922",
"133078055115751282336876449766573707802"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-5dc8b138",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "195569670050283882610103000677955070923",
"length": 83
},
"id": "CVE-2026-53752-5f2d4bcf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveRPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"260408832721357041584519288602438236982",
"300309775911650260743457924528290484575",
"263590860595810617130370921149620959820",
"55038772162893320980838974683014807017",
"247993170067090269344280526109145562710",
"84256225609101158928679535923286455989",
"205671994856333578973763310633360121186",
"46138359187396118473781555211509459645",
"331866092219070272990160701507652576390",
"21938481575559360375098664773437535131",
"230230008830393843289944124748018201885",
"184451890161379332730837565862890658454",
"73654469672662869083785748040243295048",
"340034764496394773206303838528418514286",
"37371800070708101260147759582803327641",
"67301460329437752762694179177159007419",
"89780555855998340947250183165216447278",
"49227813482930521234708428350339068337",
"322674328049934472814343835622492696085",
"52903636684244607463842259739355364417",
"270248646662235275923666011736708117239",
"166802586444138755533792187920754258486",
"103635370147937814815659209119036170110",
"235780570165680403099895776634144499972",
"216734225116213286312523652490767827849",
"75650652545864836048611290580656641857",
"317615301928251703810716333885783117341",
"263026858734609711057886845243660979927",
"40765959289246328026828577644373238537",
"19722802949095051819593081567506627802",
"204984945367634398731960467684439190090",
"5050127683178423322034570459106887730",
"194374390108341373670064390847591062491",
"1228902443698684911957630324214003821",
"218125315631047793437315798506661865750",
"120147824378680241989658702705865258697",
"95527564803440202417039264339387029891"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-602a947a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"304208252938965563631018938678025638586",
"67952518641413017537761434250568945464",
"214894053653938600767592165791975005632",
"278138468420238653228495056059049681490",
"196408567927788211110575808812360310507",
"336854891857360137258075476282099054108",
"24816009478211679891228595737517260995",
"332514916307393847616467315829760040800",
"324883987970557945955114711120551084141",
"144226165863072925753747119176199240713",
"3329727015013959277082919639951622628",
"319714563824563127873585550840531730154",
"199244349108766293540226769773062411594",
"259662314209654416069527394976438875025",
"143527969455669004684714104631766426259",
"90525836561271533792988212525294728141",
"284761337950208025314907149110284419835",
"33492494478490017824677727862269865876",
"249200485792074118765830863745321741386",
"1357515343291711620601585347742814768",
"299553850117799506122555208970179834985",
"57351832493540441366609577007713291042",
"174189097212310024121917071474130280356",
"219746785589554590081218377905795699545",
"30995435117726321522101558659732934224",
"133323408334107058636726479955209430261",
"80638466449348476542137540606822136330",
"49491197267439627070626302445568487425",
"226999269387401437531877539299052393939",
"236487300510380248674495542235845424405",
"242683081494297077590040599603840187234",
"311562066714531137876174831021817272408",
"288923997864937717086923256194121832613",
"322245596320538168246743838249180909686",
"23828059154888002646379878105112797036",
"122954583804519023666179974937045020934",
"154174141693984747745129237797285616975",
"215648678257820067288973280973521087447",
"145457529424625620012700399250812243006",
"286350153216993593267233084556141651576",
"18005689853947704693089786089566442374",
"236761163967131622993805449626134482249",
"49244778925537667206161744436105751617",
"160648261865096627510691077582443532111",
"25660678182921567293200631242706055227",
"235028449074258753897443789674409046823"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-607e5ff8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"64209122250896031918884848186197422900",
"240958878159771611920614552216569304411",
"81499223535618282138376483764545311868",
"80128380090465919469725753022508580338",
"160134997240357659997526039123428019930",
"42343920432473910721985363553789512866",
"76468441246945098543142609113748248372",
"15700144866577246732758830153248334808",
"60691416054454832300929708699821350190",
"47815726890206809237650230367239076364",
"172371683829865746848559801714075676001",
"216294694716327755857805996278263119348",
"35382083895130736405803684378100996113",
"333014589699431495259640124442032235977",
"128467460120124616963734237027653098153",
"158126126748663457367487416728025478502",
"93088855002770684574489605911129702140"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-608537c3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "315387019285090325502311850050937845369",
"length": 454
},
"id": "CVE-2026-53752-60e9425b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"301429877646539842872157878545453470532",
"139775898156814589929523815643173921494",
"56493907164402241170928235793258691634",
"37917832538160998564715347821871440823",
"316697723670839676377428434422106416186",
"63380976696173793933852694777665306979",
"94220719543937806996552122545121370626",
"4115199245449948585408665925791459590"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-61e1b85a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/TableWriter.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"293199443369887520159272717408358622794",
"178587607655349722589687278491307808087"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-640484a0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/exceptions/FileTooLargeException.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "39748593462799503479494646223798854089",
"length": 554
},
"id": "CVE-2026-53752-641aafa7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectivePPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"17292262346736722411382139261066186152",
"160060715504592210739977166830226173548",
"250263153973172773507753456103850104824",
"252667289292446467595390504693006075234",
"254951304650310042301778488992632474762",
"233709211457592932713408060132465760812",
"248429948904394073302097649668223680960",
"11235705864599559126574513750477951174",
"310953645096989717751911159051288221346",
"219053488107748578354011433345361457",
"328333830852861662330932932195839515775",
"329463613313153499300941949050249929459"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-65fc1433",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"8523247862318731945285783537201049936",
"81519965031195813660592520743868441937",
"51353908472617672833264713074512759019",
"157933225396830157876115790461424996589",
"64779892344853625995235064993953144380",
"114142679993317972872561029022709830236",
"241554190767434420742024557300468157003",
"157933225396830157876115790461424996589",
"6896007380612838917607415030342181591",
"148874301646072785921347326032382140364",
"119478231973002676459241473140711669432",
"157933225396830157876115790461424996589"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-67e3b4ad",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209474619215291746104221497620315869016",
"length": 943
},
"id": "CVE-2026-53752-68ebc540",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/NumberingDefinitionsPart.java",
"function": "getIndFromLvl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "34495204018289400516956322849454325033",
"length": 114
},
"id": "CVE-2026-53752-6aab930f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java",
"function": "getEffectivePPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "115335845878098768964207110791759386077",
"length": 589
},
"id": "CVE-2026-53752-6de2636c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "fillRPrStack"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"62338778388789721892122034529883963604",
"313375595396674377095787784874501639637",
"232269899582030116778926534543333905785",
"143210326254595289083935214925137805047",
"90896782313634133322862263006619038578",
"220654640589840119764091086335346867459",
"138885240555814388941558348875025040268",
"80738728458926536067930367643929489976"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-6e55d19d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOConversionContext.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "245761557565598687370086811237878422874",
"length": 583
},
"id": "CVE-2026-53752-6f90c66c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java",
"function": "getBasedOnHeading"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "90059287622102730808959626962191550947",
"length": 155
},
"id": "CVE-2026-53752-7215ab9b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java",
"function": "HTMLConversionContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "155801514267342146087844074666704299578",
"length": 5429
},
"id": "CVE-2026-53752-74ae2064",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java",
"function": "fontSelector"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "154776232986387809907558642659716443174",
"length": 1302
},
"id": "CVE-2026-53752-76168bcb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "generateTocEntryPPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "132185259622760668083499042558682168919",
"length": 240
},
"id": "CVE-2026-53752-7b8f7fe5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java",
"function": "ListsToContentControls"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"139899971468091807120987051228537074575",
"14034517772910124817275887884413036701",
"217773203291444700578026529551505056578",
"311356747181915021166377177338823936175",
"5030718737970610165050231109077994609",
"16538066729754361131737365345997748594",
"132558375002047157859837343402304848169",
"163604388497092643723464433185432307067",
"305764551951256911618834710044903542609",
"51361859986119144828043481089933111276",
"302107242808998638710757154894873473493",
"332392996849399905530107882786517590964"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-7bcf2dc4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriterModel.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"32099418726472368793553977319656288126",
"291723561313055032794963979481199409071",
"239796290657823707652175709173880059358",
"136155172917924176612719502970783979329",
"32115714230565008611258479251258331552",
"207456942680614125279041464462946755221",
"23354314820659325017011413746841870904",
"307130809595049667602590841390352400148"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-7e0eeab4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/packages/PresentationMLPackage.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238099595653392947368739101218662367674",
"length": 963
},
"id": "CVE-2026-53752-7f7eb9d1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"199112857728822152811423519594580185420",
"334847016322113600617182031077144750483",
"36167333025390799033133528201303654366",
"319426003470416183694362258076177064688",
"104189023089826312420328485113428372170",
"268162467714635779508209480665605414091",
"177808691648473068986772243693885717652",
"323230400308107986797340783745582760885",
"173321458604809617239199927995845631571",
"262345199092148327533554024318780708727",
"72754549751116290823062842924415769039",
"54681910500300171191829972417858963629",
"272364385074564359630860353661025618439",
"324971906915461267393890053990455852159",
"157062960738808936367596581321830102296",
"268276974162782388033892731391809872026",
"245623244580543390490859092937418850785",
"62593734598856024489478170340286000267",
"88661989981654232336566253778629442761",
"30304461610789962571011629023788976565"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-831e6736",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "204593930311270555139155639335014883590",
"length": 683
},
"id": "CVE-2026-53752-85a506d3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java",
"function": "getOutlineLvl"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "254478115914323383830064847190956990502",
"length": 129
},
"id": "CVE-2026-53752-89583265",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java",
"function": "StyleTree"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "130831297542396636568455671885804572106",
"length": 359
},
"id": "CVE-2026-53752-8f55a85c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/OSwitch.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "112855768844466340308128231552181453494",
"length": 1096
},
"id": "CVE-2026-53752-92ead722",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java",
"function": "getDefaultFont"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"200054623028026971335852233570600184895",
"15361248568652531453379001806944825557",
"15298802527555376313320907428589147453",
"186648115197549478716501070523288243309",
"285970437712920161302834871193031738562",
"107619094983852544800709370614152553166",
"306185571652851291798820216973202205881",
"266272057410297725423563668313767048276",
"123189993720157852151193467647473437538",
"148410391474109021669235467899865631228"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-957008d6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchProcessor.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "62926043709607048795138675257622099664",
"length": 74
},
"id": "CVE-2026-53752-97d7a77b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java",
"function": "handleRPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"100425263596975024512108662256594494088",
"218046167044436981176159253812663555782",
"7358332658431084908567542398332612066",
"29895745390781246944696193608078393292",
"107348382836712987564857288295194678664",
"191007557972275999718047400294428626355",
"153884808226702002531272421391252081442",
"322152638033756894878834029618971533747",
"156473959577412182023803749997735404",
"90600582106101616228892596734247971171",
"141373654826110486782810160978877840083",
"227376955561733717425674903091898547532",
"204012124573383451569249422000020358835",
"30004912201944646721271969913113119406",
"215315763484505518309388456503296284534",
"158047700307072874681177514652201759621",
"182348501780738877151826339658995453034",
"336474690538278019484344731122399761363"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-97de3ada",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "237796904769822014267082360939149759435",
"length": 1961
},
"id": "CVE-2026-53752-99f8d782",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocGenerator.java",
"function": "populateToc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "85674118412238989435396726640551967974",
"length": 2635
},
"id": "CVE-2026-53752-9d843eef",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java",
"function": "createBlockForP"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"219526409675404762192569002473271339704",
"208604346916195145988782391150381520618",
"334903371699682916471909678145741100065",
"303542962299888338198687589662870565937",
"339939045893175187914254942823604845928",
"89432318571498101153042126664472953021",
"238698693337056459410425676961934547874",
"112293629676326483755036698235881783537",
"99078531458104569991708614815300470668",
"325952831400843048446765055524237654114",
"146878562128306516743387391030615966689",
"11818231652136467892568427815166734958",
"142973258138100475714994611562548726560",
"82536533795161389726966478295849330089",
"104941449039663193352087286744669267154",
"51738942600984746861970148881274043371",
"274830912660651489426867062404368309316",
"55369774163772827700939542695468950386",
"337700478193663597339733848862806049362",
"89183136916243849745337274850994599353",
"131772761492977050616050193489418127755",
"17672329038846800685790855478833139660",
"60075592926701506743382010013034956775",
"7578240408592065866120587709303334328",
"225930026915597686114539381207919447343",
"2079307124392366782228504916120615524",
"67270064152198489268090688952736718261",
"134361073757133850083904673132258166175",
"76181376231435499851213127658790770643",
"267936138868125143287898048839105445856",
"144048814896963174015300640501949208403",
"292740706536833059701777838378154915404",
"154339179939528662617241369529307200745",
"42220291528604702654845043686256313463",
"54233590289245654876344863596145136782",
"322528532597189662376482495054332850106",
"269245236698655515658267018817733198956",
"77430919327132486493938960504669613440",
"101130932912649753837064688408620578405",
"2386360067980395792713805928754922729",
"131822246706560043566412251617233698752",
"25793436927012558724280624409583764928",
"99893049967637949884458248313397889772"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-9de404d1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "112879116710385546723367597607482445586",
"length": 221
},
"id": "CVE-2026-53752-9e0aa512",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "getPropertyResolver"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "296815560158313072802163884486146815882",
"length": 207
},
"id": "CVE-2026-53752-9e288c0a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java",
"function": "getCss"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "76522405205992431929816379613980133292",
"length": 429
},
"id": "CVE-2026-53752-a0d285a9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "getStyleTree"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329698943008968814858611266004117769255",
"length": 2311
},
"id": "CVE-2026-53752-a1a28466",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java",
"function": "createBlock"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"330558189541401702964744024272066164299",
"88436846289922252819376871292068858553",
"126586217382463775783461604666515161680",
"125897606052410568018932573424671715572",
"214927711466942993719626435131406403716",
"41221114774469222792032187598856847744",
"283754587607237645910818934031453479362",
"73106795042333986173415826948366591397",
"155983205281162124958284350670890814624",
"112657634803260415626940041917170408002",
"277965683079794538499027112113776514900",
"9088500985511141077211024440202453101",
"260883231914433445961851569173099336499",
"164784509271929664511278870560302008401",
"283754587607237645910818934031453479362",
"63211280080615812457626724580963213205",
"100855899347320153030603253133831434373",
"316510587041120824184866932358045610788",
"37533416535124188285052754321326091104"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-a3a5ea71",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"158611804778048662779438678213882391513",
"336499520006366697337901345516661057845",
"275195237812642228890206317300048894422",
"222355619682840552834216256849724021752",
"317541184287229042850856901843356913865",
"309810270609937515583178956425510191896",
"274681657083228006259151022908187298186",
"129843981486349262442318909983977820866",
"84359884710100844720656108694412979277",
"176661255261984393873001451236963759108",
"60983915425682298512231088116026925034"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-a4ce95c7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"323863172958832670872756868063180360759",
"323558596043741824275129954753923450312",
"194443231741127691712326304907951930862",
"209643621780198167848999758993325438034",
"8525387441083145551562966942585430246",
"241115280550577757501691284764819296302",
"27841391850750484341491363787894223313",
"280353230786947205863088630031989393737"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-ab4573bf",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/datastorage/BindingHyperlinkResolver.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72607292817704584917302499020879028714",
"length": 3588
},
"id": "CVE-2026-53752-abe9f2c0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java",
"function": "createBlock"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116727982442512433728033520187770508423",
"length": 424
},
"id": "CVE-2026-53752-acce6479",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "getEffectiveRPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "44048246955009542667447780599946220922",
"length": 212
},
"id": "CVE-2026-53752-afae60f3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/AbstractHTMLExporter3.java",
"function": "createContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "93598425575685145995798386842507795823",
"length": 74
},
"id": "CVE-2026-53752-b1bf1468",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java",
"function": "initializeStyleTree"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "20002320488192907554547846845399938925",
"length": 2316
},
"id": "CVE-2026-53752-b2d1c9ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java",
"function": "getInd"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "314384670569420497014348683247504065060",
"length": 2677
},
"id": "CVE-2026-53752-b4d48e91",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java",
"function": "toNode"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"241454871354958810765513982605361745655",
"173437797956805035410516667427521760720",
"111011585147994797856240397551942174668",
"149253199549780472021559181191590277129",
"162828159874022246744294750799320756346",
"103643461385262687076102172105623701900",
"251771359660199376840825383656886395045",
"205669168709103300573532686462315610097",
"90318785404160791201489601771653506937",
"77996701497327278632951207976523078984",
"140801197124997734539298580094466319533",
"141648281089413942309642503572501695378",
"309933526351775888759323970296716593518",
"190463333219093989253393009514254033416",
"324689347639958552241424644640593851689",
"152926685115102676010688856910022456748"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-b4d6bb72",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "137081906186853286073218808917735576054",
"length": 1356
},
"id": "CVE-2026-53752-b5415dc2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java",
"function": "createBlockForRPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275755220383955686486016517626772888159",
"length": 1579
},
"id": "CVE-2026-53752-b6bcad3d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/XsltCommonFunctions.java",
"function": "fontSelector"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"218137181989403271802443474623290286762",
"201932702976397628655581462970512056489",
"23624791424546823572377456898657676766",
"55093020298268096822424942918547028012",
"96847882625583621716025890893858981683",
"132436815159588707258846076381620414799",
"209645623012693352523807616460867785013",
"252289045701043284137057747423120848921",
"55535665589145461706913316601321518597",
"315042106823574621295856708200446307358",
"1113607577926318416268492910626609525",
"165940413093815095789717479960448736601",
"216964386414573321527890935608558334842",
"137470171482322685742891435423751011103",
"94590113627696508118378191353414664888",
"45111002840962233675366670572580724006"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-b908f262",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"262128628096812736533229344537367218774",
"190698874230103140712464214554603810618",
"29510543495712490893172893793575016903",
"242410460619274361832157332835917776523"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-bb1fdf32",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchInterface.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "217858946962996498590452024435833161178",
"length": 2152
},
"id": "CVE-2026-53752-bb38bac3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java",
"function": "fontsInUse"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "60355034011623138876900316472966019290",
"length": 107
},
"id": "CVE-2026-53752-bc94be7e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/AbstractFOExporter.java",
"function": "createContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "70785588797100392685109757347469133708",
"length": 106
},
"id": "CVE-2026-53752-bca42a5b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "getEntryParagraph"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"331637266762897857020807289673731218327",
"65495115972213956690399209777993906364"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-c01a1fc5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/exceptions/PartTooLargeException.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "8076267442532408860368515020049851539",
"length": 940
},
"id": "CVE-2026-53752-c4859787",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java",
"function": "applyTableStyles"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "298843802119359758232948069999274853752",
"length": 318
},
"id": "CVE-2026-53752-c57f10d8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java",
"function": "getInd"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "46574959205112002872375381954441436063",
"length": 582
},
"id": "CVE-2026-53752-c6d95686",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "fillTableStyleStack"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"212632748327315234010296930926937609115",
"44686930217847810004927641160108544806",
"294888770853221613573409640907789981706",
"61302922601537938450710990035872275560",
"92996336301451030000681557130795471659",
"329790084798399474035848743334970643801",
"126503661701741243416878156416642335115",
"77488448420833042695052059407794397811",
"82757844291921540793454514009200785512",
"175857385036422896267553177997256541382",
"265545213811835494878563645804820221120",
"173222056757150511793256816198359380005",
"227550581132678880917788274030040394214",
"247050842917369032062536626096332974285",
"216523317180134794229499306707965027280",
"11926386026805349270681397058832753881",
"19881860006376632939352217934529371492",
"106978061182562262480295236460719400843"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-ca7044b9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "266758488480849837082092937399342367540",
"length": 74
},
"id": "CVE-2026-53752-ca7e7367",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java",
"function": "getPropertyResolver"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "62926043709607048795138675257622099664",
"length": 74
},
"id": "CVE-2026-53752-cb3af921",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java",
"function": "handlePPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "309142127522054259339117832435967353128",
"length": 2052
},
"id": "CVE-2026-53752-cbdf0281",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java",
"function": "getCssForTableCells"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"87888000601965501269476850646063875003",
"205522229996962753460753407803938011523",
"130620998354648005617906328286881868652",
"153738983403669482612739968160416033862",
"33083141263988072791796904405024603367",
"218943677823278952079455296448154022979",
"233532920804002262508321278872938873363",
"261315407303352461245880289723331383733",
"190350030496973252166463447996726686295",
"194041807616002541822520626915284990517",
"215102380473461167118627380090086421481",
"92770370846597254303319641886139801566",
"239293539528415113533218064704269297015",
"97895760394425264972798341639098099282",
"33614086822419888842027456828117094480",
"245233290115862085348624388304702009189",
"54570457356215533087777269513025672304",
"112665618417886014392493926275135737299"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-cea49e79",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "168760365506023358872152511346757968210",
"length": 885
},
"id": "CVE-2026-53752-cf8748e5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectivePPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "148643722464045104697588092459111550727",
"length": 5214
},
"id": "CVE-2026-53752-d5c83c59",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java",
"function": "getCellPStyle"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "286263186514379942726489175571945581359",
"length": 1081
},
"id": "CVE-2026-53752-d7a91e23",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriterModel.java",
"function": "build"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"301501683477927959864070455440349926870",
"210014083185992052411726041690177244906",
"126486747721223059541775963279693389403",
"144260236435307223477865258442084755700"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-e237cd50",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/ConversionFeatures.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"25652182235799429224235050942338719288",
"224854205280910624046579945719597480949",
"318799595007527095885075082458373597968",
"246441771203622198903178620765681433136",
"92053710947200208719335395438219372020",
"44882839115019983709018308036579220221",
"259329901840670476326544608170043962237"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-e2772c5d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/TSwitch.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "74750647674036051562023179380708476060",
"length": 640
},
"id": "CVE-2026-53752-e4c0ab8e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/switches/TSwitch.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "101807652825886380326917135118315831103",
"length": 193
},
"id": "CVE-2026-53752-e82d3197",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOConversionContext.java",
"function": "FOConversionContext"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "33421587645021950809108786948690060778",
"length": 1685
},
"id": "CVE-2026-53752-e8bbec2c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java",
"function": "createBlockForRPr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214541277893529201619057988210955970668",
"894965981452408318303838914291184755",
"334768167624164131991425758956853206758",
"74792820026190346939567776187585615896",
"263816450824961478901161076093785801862",
"89331372347795618090947553475554870862",
"227878983367334264907436044388126371607",
"287234041821709362428346623275866496549",
"319549974603701209439855302307295795394",
"161162444637749461207504157644439764642",
"138710722867878618404606458793875886678",
"246984711757802942307798937483388032974",
"148567040403712677021442334987107915949",
"231886368134130376287958996012687043715",
"317648628627577061141202547147016304420",
"213131118702022658649006460892333445782",
"8913341787595391101142830685596664437",
"123708137118796396018494848435407678302",
"112310885199692643323550696072323714021",
"4347024590766613771385212830930564955"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-e90f6b60",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "307864363785659480081205027966174946073",
"length": 467
},
"id": "CVE-2026-53752-ee7ce023",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java",
"function": "isBasedOn"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"66836563644392005381160888015442862367",
"194894458524578191399297925800014735439",
"206828307555460334061246225964721237492",
"203654132048873094624055749004740321367",
"216699046513732421858625282448900664644",
"252032237847641434982134418579471724352",
"286535121932327218942133382216757296592",
"105976223341964801198312342363126837287"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-f286f894",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/common/XsltCommonFunctions.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "37085038595442681990982466407824175",
"length": 858
},
"id": "CVE-2026-53752-f561c5d2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveTableStyle"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "181157027508993066909696098133900325687",
"length": 808
},
"id": "CVE-2026-53752-f5ad762e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java",
"function": "getEffectiveRPrUsingPStyleRPr"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "138441734673524049077448455744228466867",
"length": 412
},
"id": "CVE-2026-53752-f6adb9f1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/openpackaging/packages/PresentationMLPackage.java",
"function": "getStyleTree"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "329768675572987496153974347603234731105",
"length": 188
},
"id": "CVE-2026-53752-fb745e44",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java",
"function": "process"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"80839173876838328321521190221962242957",
"210687051231671397748123767403644406679",
"289911198794766633771863814078678673193",
"233364863709305464640982247677523857723",
"3922760906642017229352317095434621891",
"317634684303995314950630518761323063190",
"259589648470381423941537654441440755797",
"92093609148274516852637167513949416321"
],
"threshold": 0.9
},
"id": "CVE-2026-53752-fd45ec36",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06",
"target": {
"file": "docx4j-core/src/main/java/org/docx4j/convert/out/html/AbstractHTMLExporter3.java"
}
}
]
vanir_signatures_modified
"2026-09-18T08:10:19Z"