{"id":"CVE-2026-53752","summary":"docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service","details":"docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including DOCX, PPTX, and XLSX files. Prior to 11.5.14, PropertyResolver and adjacent helpers recursively follow the WordprocessingML w:basedOn style inheritance chain without cycle detection. A well-formed DOCX containing mutually based styles causes unbounded recursion in PropertyResolver.fillPPrStack and related effective-style resolution paths, resulting in StackOverflowError. Server-side conversion and table-of-contents processing of an untrusted document can terminate a worker thread, degrade a thread pool, or deny service, although isolation in disposable workers or safe containment of StackOverflowError can reduce the practical effect. The fix adds cyclic-style tracking and CyclicStylesException handling. This issue is fixed in version 11.5.14.","aliases":["GHSA-gc95-3vw8-vg43"],"modified":"2026-09-18T08:10:19.212010Z","published":"2026-09-14T17:31:07.287Z","database_specific":{"cwe_ids":["CWE-674","CWE-770"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53752.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/plutext/docx4j/releases/tag/docx4j-11.5.14"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53752.json"},{"type":"ADVISORY","url":"https://github.com/plutext/docx4j/security/advisories/GHSA-gc95-3vw8-vg43"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53752"},{"type":"FIX","url":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f"},{"type":"FIX","url":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/plutext/docx4j","events":[{"introduced":"0"},{"fixed":"47b528c7dd4c81bcfc8e7fe9df7610c60446f95f"},{"fixed":"e06cafb334089f0be02e1c63a7c0a602bd44bf06"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"11.5.14"}]}}],"versions":["docx4j-11.5.13","docx4j-11.5.12","docx4j-11.5.11","docx4j-11.5.10","docx4j-11.5.9","docx4j-11.5.8","docx4j-11.5.7","docx4j-11.5.6","docx4j-11.5.5","docx4j-11.5.4","docx4j-11.5.3","docx4j-parent-11.5.2","docx4j-parent-11.5.1","docx4j-parent-11.5.0","docx4j-11.4.11","docx4j-11.4.10","docx4j-parent-11.4.8","docx4j-parent-11.4.7","docx4j-parent-11.4.6","docx4j-parent-11.4.5","docx4j-parent-11.3.2","docx4j-parent-11.2.9","docx4j-parent-11.2.8","docx4j-parent-11.2.5","docx4j-parent-11.1.8","docx4j-parent-11.1.7","docx4j-parent-11.1.3","docx4j-parent-11.1.2","docx4j-parent-11.1.0","docx4j-parent-8.1.0","docx4j-parent-8.0.0","docx4j-6.1.2","docx4j-6.1.1","docx4j-6.1.0","docx4j-6.0.1","docx4j-6.0.0","docx4j-3.3.7","docx4j-3.3.6","docx4j-3.3.5","docx4j-3.3.4","docx4j-3.3.3","docx4j.NET_3.3.2.1","docx4j-3.3.2","docx4j-3.3.1","docx4j-3.2.2","docx4j-2.8.1","docx4j-3.2.1","docx4j-3.2.0","docx4j-3.1.0","docx4j-3.0.1","docx4j-3.0.0","docx4j-2.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53752.json","vanir_signatures_modified":"2026-09-18T08:10:19Z","vanir_signatures":[{"digest":{"line_hashes":["280519060375843744562297179608171019043","262274061368740046687241096854766424355","178127871962888068571010698218502576839","321957883301755578763497206731448244056","115040309301807102745522730460105199851","161034539446922165375643676447163638045","55771931693123418571065961130708967691","278299640067934575175355654904485698478","192630957990124255342194085518770415776","326929135866388794862233373128699459482","198405477267532136100668029745540230587","93191330831786766436492864027978999830","322763332076091277879254086055760458636","121889947047287848729477657989414257892","157768892455506989619026394843786681209","111446322057699412448201989544697557889","334719541547707352216017348152706229938","68529037399089274395452464261465010280","50491919249395911930212920378504994442","293218487402165440493090956460738419385","340003063997849848966956869398954683086","135476917568541770371296813333196325539","311438512654527764736095548990412580028","218517860950998934035241366080423471592","171966820480598735843129815766763887989","176951898081164030723535736953789720026","89291818151266576421044297622376165125","192171753317276680032403723748131316272"],"threshold":0.9},"id":"CVE-2026-53752-0505692c","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java"},"deprecated":false},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"getPropertyResolver"},"deprecated":false,"digest":{"function_hash":"24613560233047016535892289466071329727","length":49},"id":"CVE-2026-53752-05a05cdc","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java","function":"process"},"deprecated":false,"digest":{"function_hash":"164369124530504902306738332593814489615","length":717},"id":"CVE-2026-53752-0891bc0c","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"deprecated":false,"digest":{"function_hash":"10832598363897527349824181528379961169","length":89},"id":"CVE-2026-53752-0a9dd3b3","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java","function":"process"}},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java","function":"StyleTree"},"deprecated":false,"digest":{"function_hash":"10900626317447901510957891935444852993","length":159},"id":"CVE-2026-53752-0f235490","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"310342856385327012445916888333000819302","length":1846},"id":"CVE-2026-53752-10007e05","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"processSwitches","file":"docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchProcessor.java"},"deprecated":false},{"id":"CVE-2026-53752-1364cf72","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"addNormalToResolvedStylePPrComponent"},"deprecated":false,"digest":{"function_hash":"149540886818800791819309812536689202915","length":336}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"export","file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java"},"deprecated":false,"digest":{"function_hash":"234236304726776955582718685039422633928","length":491},"id":"CVE-2026-53752-160eec58"},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/NumberingDefinitionsPart.java"},"deprecated":false,"digest":{"line_hashes":["281072600938567511912431188145547960399","36627913923395080548418877362472800634","183281085327533173434160133224914703900","243889929946349593463486343437878646895","66218783378445396752440122023983356822","327634620679729676263047389766234190124","67853557070290067185680431596912925151","139840527962803757866273063442791032881","266255401935150798098134235442835051631"],"threshold":0.9},"id":"CVE-2026-53752-16515754","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocGenerator.java"},"deprecated":false,"digest":{"line_hashes":["338560353499916776739650905301911944952","188164723139909894367715622587455348405","333522582814235061899766147500293477720","256021090292594475619016014005488383561","118417514213516561289774139488954349724","75904508016748519969130930159288184783","88248165001246578537253267275136805599","319583027049104496556594954078787257257","178103129201521667433681200533778228095","308377341460770146707545578603077146013","140386269849598198236300771242683660001","101807766061997769233667132742849473809","85872795846285181978626002399999179381","170229451666466191917448100666612718840","191664064838371997165490746402621295313","4244856913378538661803208980761093186","142291063344172350489011503717760126728"],"threshold":0.9},"id":"CVE-2026-53752-18e9d857"},{"deprecated":false,"digest":{"function_hash":"204262342615268088972087519696913429328","length":3352},"id":"CVE-2026-53752-221fa419","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java","function":"apply"}},{"id":"CVE-2026-53752-2242f9d5","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java","function":"process"},"deprecated":false,"digest":{"function_hash":"20951000308934965234143969356482547698","length":332}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"fillPPrStack"},"deprecated":false,"digest":{"function_hash":"300734909064279279856513750190921929379","length":2176},"id":"CVE-2026-53752-228cb519","signature_type":"Function"},{"deprecated":false,"digest":{"length":1499,"function_hash":"170960140921248029974385710090401883615"},"id":"CVE-2026-53752-22cb8411","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"setEntryValue"}},{"deprecated":false,"digest":{"function_hash":"262303098872087158066724094014854727917","length":2275},"id":"CVE-2026-53752-23848c7d","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java","function":"init"}},{"deprecated":false,"digest":{"function_hash":"172432463292473176098356919096816397269","length":136},"id":"CVE-2026-53752-25110b29","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/datastorage/BindingHyperlinkResolver.java","function":"activateHyperlinkStyle"}},{"id":"CVE-2026-53752-2943c577","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java"},"deprecated":false,"digest":{"line_hashes":["19701879847538221858245128088462585899","144122434077075931222674710304397776453","140260836519018487436849975543628970655","63581472406686162597383947651970831368","170320559293221803374053938404759385225","312562848302439105297347624197274631048","295884640990139669774052089935186085920","23546187863622651592562536361430632143","69306197920486270761343260886985240353","188532225723917000472577455814559434075","250289348079374519407887133507580053781","205603537307081757755652444999170471534","292918697149770867909737514629688643417","98448343750191024747941411277425964816","235040819197860383261894759748491100030","339918662927399029430324515698361144787","298397031063287548147562580687876974890","263677587525863763861192838367736951517","84356262334660576928398883517328638711","286216334514778868887853930347825392365","7969967315771171558229005765337435346","244175757418755889525953309700412356180","6686061359120989465523395812657870820","34001466659693552362795323482519089392","185972466899585556704627052780388129419","55141687307281792006063622922518346690","246996233048056217537468503360968809940","69874406470610078939564357786446895683","48003022724541580422864283396166123420","153132481010430415114654736737990002762","44795473852180557170511691801250246867","224439982925284172418601805376314767553","131218965689011645520748226479146804964","139913355187527065012448200732475929448","100508147485741307303483865847556934923","281763902132906981973550549220840631281","211772050065044952644201231994722922828","79189193438101190396077020867773119292","170675472791047991515977787457396934128","11524769738988185369489541379180780922","137019256591065207292751109536653947432","293525936670932243523751206441131492835","185742588301101449274538573712089821225","301543193553851985494743107988250550034","197047187622232130911516558383867450206","112951084082890685153699630833275799191","209617027798030487172960820785662965081","23487602818260407931151901244986371040","295381454427161479212239311917044936403","231172949339159094801152861127536652299","120079880608511456687554338161682225630","190257673706642161928083430628261735656","178003405956949469604753236806200366467","311529713071590944002699224176841918725","53568501930141863014988215859045683829","339218059852493915057410780665977960171","250701466828453587388469152530371260387","7638526237531838040435189402115172125","278466860885045038532565239654700360898","142972892442058847528943288343438875930","105606608000237806630422723457359963633","52265803035260056378472452385846688955","5536980929576138715540305763080644241","290951143400383243952767565042583060543","314168205584520571880402781242825935104","178937549710388077183338547290399335169","262564678468494466494049400073443098584","94858852904707172452238592816000249514","307143771534879103974157752241246504903","160573628535794025121709518220833055777","281702536848079521503167546744853526693","95886540698865002602242077683452111154","176172515881134113282437876204095149938","185927736476710914740375644137478119099","180955531967879706445449176272932334047","35457888716543013023501845141004867414","277866847440250423418883186653972579484","220930396985614472667763678414332838776","161486038462326346602102574627900308042","25221731137468990357912082586085811676","142280312595639418846059657484183049163","35478843844411214058152612709276577795","267359897470478367842943523342787400776","244856027285919608649073146382293284835","37273276420189389202206453669260614307","234223771119004324160820721370356275898","339412762551205267507324915612672588157","79462923505475329287876291358500672256","90705740419707122225680543975170977053","134038378235410556913332708175226314249","99956117768201816283547138594359027824","158775950973244716420448421803966438138","168877070843166558705089833301096419203","197511887791103174976260973969448010879","294608768347870665908824969913975620605","43210194581641067095519922596597886218","50987822233658563644117709436469490642","329142441974100450687912940587868277190","278261552769386682597820303413028924731","280835455777416276136202879505097033822","157659596160553377745849543302850140210","229514693470685983530009760505443038217","100493673717102736683012633681787629914","44106643537744172964948194162104089154","213687089893203468672977675833879479533","279163625393723940884368495532720272307","101528678828460896843491655088148075115","229851588512522049053931821369728770320","14527226639935187960866468002606494230","148106304279713312157341834398668507062","56952911610510940591277185143992132000","151953934536232343728304363186891548518","90066763549658818898981731938962400341","271020718437618511917107405431079012147","123586545296683514942293562941150300805","54049507557066875669090930720192038452","171239327131395889700200505104270301113","254896775202068364485575230457981521733","39959861342753612744002252995574534851","16637617885712247042791083427640738066","259736764093812526252268733165444167456","333353825092295953131519613591589170290","65680800087064282838353706437714963600","93345533253634212143160581461776642290","77175084929484094636620114938862484837","211772050065044952644201231994722922828","120104491458905757447408302096804840031","119796866826364700637754299315135391554","3480991618040476709744762920115054039","242912431081359342462624899909814135677","69874406470610078939564357786446895683","48003022724541580422864283396166123420","2017574181962733575826759477930419389","330479069338276441715402728110620607265","159214407742098870975770348019105576883","291735606371773700633746173715553562740","88075202495704827458314931405453781817","211772050065044952644201231994722922828","81996477993963627020307751955673270612","190380811652949418028129571451386026716","77213929274660490341961717634418732019","135567837238881301794526896203497149730","101460903222255454887575039843811423567","17008118679446444518006520633791247162","145610108764528158326345861630057978309","323312155769964607872785118250509805736","262104342387317424365877415740040254755"],"threshold":0.9}},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"getCssForStyles","file":"docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java"},"deprecated":false,"digest":{"function_hash":"19786531076233496854382936282202243887","length":976},"id":"CVE-2026-53752-2985f94f","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveRPr"},"deprecated":false,"digest":{"function_hash":"95934799845865942412493201699776816744","length":653},"id":"CVE-2026-53752-2dd2dc1c","signature_type":"Function"},{"id":"CVE-2026-53752-2e22a86e","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java"},"deprecated":false,"digest":{"line_hashes":["11672205691784703346216625015542697810","207033198082807438808003420726539568739","122810297273151571229326526322945181040","249361539549485477748540121035431902271","146932160655349993147339284040971509973","246500552251656298363732807925134923881","203043292433363569778087932043612875552","322926521109634292650033453600344296668","51495835307693228525658890255964003542","63568292199145409602618075695442521850","42667320669243723769845393233864809345","116694724070065349401549443679181278893","77159204545640827713828927399307831265","151815637017160181775503288732636540814","24077315318143505419347297473749097548","338956871600442535794087571834367454082","173693814410713435639633021390972280086","122558130401736322645543963183238800128","285258008150577390668318792189042535571","130124265413790742624015468231634890215"],"threshold":0.9}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"addObject"},"deprecated":false,"digest":{"length":801,"function_hash":"97727049433195577772835934391635396100"},"id":"CVE-2026-53752-2ec2c3a0","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"id":"CVE-2026-53752-31b3de6d","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/AbstractFOExporter.java"},"deprecated":false,"digest":{"line_hashes":["270559909718962736784481953156589324507","176574976985889510739849352613284315366","21937381514582170995566720012414712064","19773442415621025890766676019272430426","36998552974075043146012232233110340358","175679820023950934404222861507489174561","281596782401545081968411974693979272084","269332913035854613587200866621362999535"],"threshold":0.9}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"addDefaultParagraphFontToResolvedStyleRPrComponent"},"deprecated":false,"digest":{"function_hash":"273646963167134975677014380563869482267","length":535},"id":"CVE-2026-53752-34cdf004","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f"},{"deprecated":false,"digest":{"function_hash":"196414050557282193978269778266734791443","length":261},"id":"CVE-2026-53752-36228aa2","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"generateTocEntry"}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/OSwitch.java"},"deprecated":false,"digest":{"line_hashes":["118887342723040886442811195442653426805","155064988441642294330875664266545104535","327326898402174807948821071502153015122","24671552308050685362312344887239714","298240208155962510927963107993464236753"],"threshold":0.9},"id":"CVE-2026-53752-36c42daa","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleUtil.java"},"deprecated":false,"digest":{"line_hashes":["162533882578919513677332138186743373365","187180588165953918972607900157530173101","62907869291434619501765878567916315596","328301064918330440945332848047235871377","166301251590750761047336295096659739474","271048667134413440263612951012747758728"],"threshold":0.9},"id":"CVE-2026-53752-389fce53","signature_type":"Line"},{"digest":{"function_hash":"61749932979665072386072489514992905765","length":1134},"id":"CVE-2026-53752-38acc939","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java","function":"addNode"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java"},"deprecated":false,"digest":{"line_hashes":["62338778388789721892122034529883963604","250763787680819198820823065949059007165","83229996818358059644711751407543191539","249978363972308081259650594046874377960","177153819700550149382248943295318742152","235321144698902742929535626782637865590","127968754454577439054951661505792580071","143243779528725214432294111484058980975","284252947092290360770500409204806888184","279732227477014040206560818771197446448","99651601834455703182470614174401242363","291220266283144241601833660516103619569"],"threshold":0.9},"id":"CVE-2026-53752-3b0f0f2a"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java","function":"handlePPr"},"deprecated":false,"digest":{"function_hash":"328187433594831821588767939571698119570","length":4645},"id":"CVE-2026-53752-3b3ba7c0","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"304402472377354276892834842589351826470","length":2662},"id":"CVE-2026-53752-403ede14","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java","function":"getNumber"}},{"deprecated":false,"digest":{"line_hashes":["9925323005422879024824745455373723232","132810953892010709715346339623635626818","337196029054364516598783715268906738910","134232492470134579857757291978000785127","67974215439087331572684191405359286160","308988026208272180153350350310786878175","19901627105986824424140116507181035716","23397732468660652435287898750195894198","35304258638551550897797011445548600957","194376468174291855353439159644572330315","260259223734737344017940439062247158041","892481793836132953622128208253386023"],"threshold":0.9},"id":"CVE-2026-53752-41d04004","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java"}},{"id":"CVE-2026-53752-41f7ce0b","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"createStyledParagraphOfText"},"deprecated":false,"digest":{"function_hash":"53113594727165779834066166996296211698","length":319}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java","function":"groupContent"},"deprecated":false,"digest":{"function_hash":"307569856137210492249796790455166695824","length":3192},"id":"CVE-2026-53752-429d546e","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"20862310362286150308797813453254494120","length":433},"id":"CVE-2026-53752-4b58c0ca","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"handleRPr","file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java"}},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java","function":"apply"},"deprecated":false,"digest":{"function_hash":"334325895845409658725840469164590392855","length":1088},"id":"CVE-2026-53752-4fd9544b","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveRPr"},"deprecated":false,"digest":{"function_hash":"79945588158999406904509710608054747162","length":1175},"id":"CVE-2026-53752-514717d2","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"219231811641259964493742062828386895990","length":288},"id":"CVE-2026-53752-51f02919","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java","function":"AbstractWmlConversionContext"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java","function":"process"},"deprecated":false,"digest":{"function_hash":"129278708615854190871717707057576182740","length":1468},"id":"CVE-2026-53752-5300fc1c"},{"deprecated":false,"digest":{"function_hash":"99293922945637904501425971560221865668","length":156},"id":"CVE-2026-53752-54e7ab99","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java","function":"HTMLConversionContext"}},{"id":"CVE-2026-53752-551727bb","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/TableWriter.java","function":"applyTableCustomAttributes"},"deprecated":false,"digest":{"function_hash":"130663751063761852621977076620970746628","length":1926}},{"deprecated":false,"digest":{"line_hashes":["322195013249723838320955348525555369838","75634620474353424733295652117585416190","85691221170756659356744716631308248973","60672942067684420865650017330188522433","305827380688286306260854669648573405949","169945926040760319504034102112570053342","17162186364532511060342187327948433442"],"threshold":0.9},"id":"CVE-2026-53752-574633c2","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractExporter.java"}},{"deprecated":false,"digest":{"function_hash":"36026856746205558920938203635939418225","length":971},"id":"CVE-2026-53752-5d488570","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveRPr"}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java"},"deprecated":false,"digest":{"line_hashes":["218137181989403271802443474623290286762","198127232981129938961982328799340532968","8955977469081014843620236616841155964","186022389895421542052790169874248484577","260053606824594116777706055537244490558","212057315828823140991052003898251817397","94639171912656516940752224811335255446","91085182055249280624758779900657847614","102762003798062955487862012851568123982","236362841469999090254965717586888602935","99321431072810291865624673481962371879","247101705229661528927649294924120622922","133078055115751282336876449766573707802"],"threshold":0.9},"id":"CVE-2026-53752-5dc8b138","signature_type":"Line"},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveRPr"},"deprecated":false,"digest":{"function_hash":"195569670050283882610103000677955070923","length":83},"id":"CVE-2026-53752-5f2d4bcf","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f"},{"deprecated":false,"digest":{"line_hashes":["260408832721357041584519288602438236982","300309775911650260743457924528290484575","263590860595810617130370921149620959820","55038772162893320980838974683014807017","247993170067090269344280526109145562710","84256225609101158928679535923286455989","205671994856333578973763310633360121186","46138359187396118473781555211509459645","331866092219070272990160701507652576390","21938481575559360375098664773437535131","230230008830393843289944124748018201885","184451890161379332730837565862890658454","73654469672662869083785748040243295048","340034764496394773206303838528418514286","37371800070708101260147759582803327641","67301460329437752762694179177159007419","89780555855998340947250183165216447278","49227813482930521234708428350339068337","322674328049934472814343835622492696085","52903636684244607463842259739355364417","270248646662235275923666011736708117239","166802586444138755533792187920754258486","103635370147937814815659209119036170110","235780570165680403099895776634144499972","216734225116213286312523652490767827849","75650652545864836048611290580656641857","317615301928251703810716333885783117341","263026858734609711057886845243660979927","40765959289246328026828577644373238537","19722802949095051819593081567506627802","204984945367634398731960467684439190090","5050127683178423322034570459106887730","194374390108341373670064390847591062491","1228902443698684911957630324214003821","218125315631047793437315798506661865750","120147824378680241989658702705865258697","95527564803440202417039264339387029891"],"threshold":0.9},"id":"CVE-2026-53752-602a947a","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java"}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java"},"deprecated":false,"digest":{"line_hashes":["304208252938965563631018938678025638586","67952518641413017537761434250568945464","214894053653938600767592165791975005632","278138468420238653228495056059049681490","196408567927788211110575808812360310507","336854891857360137258075476282099054108","24816009478211679891228595737517260995","332514916307393847616467315829760040800","324883987970557945955114711120551084141","144226165863072925753747119176199240713","3329727015013959277082919639951622628","319714563824563127873585550840531730154","199244349108766293540226769773062411594","259662314209654416069527394976438875025","143527969455669004684714104631766426259","90525836561271533792988212525294728141","284761337950208025314907149110284419835","33492494478490017824677727862269865876","249200485792074118765830863745321741386","1357515343291711620601585347742814768","299553850117799506122555208970179834985","57351832493540441366609577007713291042","174189097212310024121917071474130280356","219746785589554590081218377905795699545","30995435117726321522101558659732934224","133323408334107058636726479955209430261","80638466449348476542137540606822136330","49491197267439627070626302445568487425","226999269387401437531877539299052393939","236487300510380248674495542235845424405","242683081494297077590040599603840187234","311562066714531137876174831021817272408","288923997864937717086923256194121832613","322245596320538168246743838249180909686","23828059154888002646379878105112797036","122954583804519023666179974937045020934","154174141693984747745129237797285616975","215648678257820067288973280973521087447","145457529424625620012700399250812243006","286350153216993593267233084556141651576","18005689853947704693089786089566442374","236761163967131622993805449626134482249","49244778925537667206161744436105751617","160648261865096627510691077582443532111","25660678182921567293200631242706055227","235028449074258753897443789674409046823"],"threshold":0.9},"id":"CVE-2026-53752-607e5ff8","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["64209122250896031918884848186197422900","240958878159771611920614552216569304411","81499223535618282138376483764545311868","80128380090465919469725753022508580338","160134997240357659997526039123428019930","42343920432473910721985363553789512866","76468441246945098543142609113748248372","15700144866577246732758830153248334808","60691416054454832300929708699821350190","47815726890206809237650230367239076364","172371683829865746848559801714075676001","216294694716327755857805996278263119348","35382083895130736405803684378100996113","333014589699431495259640124442032235977","128467460120124616963734237027653098153","158126126748663457367487416728025478502","93088855002770684574489605911129702140"]},"id":"CVE-2026-53752-608537c3"},{"id":"CVE-2026-53752-60e9425b","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java","function":"process"},"deprecated":false,"digest":{"function_hash":"315387019285090325502311850050937845369","length":454}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/TableWriter.java"},"deprecated":false,"digest":{"line_hashes":["301429877646539842872157878545453470532","139775898156814589929523815643173921494","56493907164402241170928235793258691634","37917832538160998564715347821871440823","316697723670839676377428434422106416186","63380976696173793933852694777665306979","94220719543937806996552122545121370626","4115199245449948585408665925791459590"],"threshold":0.9},"id":"CVE-2026-53752-61e1b85a","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/exceptions/FileTooLargeException.java"},"deprecated":false,"digest":{"line_hashes":["293199443369887520159272717408358622794","178587607655349722589687278491307808087"],"threshold":0.9},"id":"CVE-2026-53752-640484a0","signature_type":"Line"},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectivePPr"},"deprecated":false,"digest":{"function_hash":"39748593462799503479494646223798854089","length":554},"id":"CVE-2026-53752-641aafa7","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["17292262346736722411382139261066186152","160060715504592210739977166830226173548","250263153973172773507753456103850104824","252667289292446467595390504693006075234","254951304650310042301778488992632474762","233709211457592932713408060132465760812","248429948904394073302097649668223680960","11235705864599559126574513750477951174","310953645096989717751911159051288221346","219053488107748578354011433345361457","328333830852861662330932932195839515775","329463613313153499300941949050249929459"],"threshold":0.9},"id":"CVE-2026-53752-65fc1433","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java"},"deprecated":false},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java"},"deprecated":false,"digest":{"line_hashes":["8523247862318731945285783537201049936","81519965031195813660592520743868441937","51353908472617672833264713074512759019","157933225396830157876115790461424996589","64779892344853625995235064993953144380","114142679993317972872561029022709830236","241554190767434420742024557300468157003","157933225396830157876115790461424996589","6896007380612838917607415030342181591","148874301646072785921347326032382140364","119478231973002676459241473140711669432","157933225396830157876115790461424996589"],"threshold":0.9},"id":"CVE-2026-53752-67e3b4ad","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"209474619215291746104221497620315869016","length":943},"id":"CVE-2026-53752-68ebc540","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/NumberingDefinitionsPart.java","function":"getIndFromLvl"},"deprecated":false},{"id":"CVE-2026-53752-6aab930f","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java","function":"getEffectivePPr"},"deprecated":false,"digest":{"function_hash":"34495204018289400516956322849454325033","length":114}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"fillRPrStack"},"deprecated":false,"digest":{"function_hash":"115335845878098768964207110791759386077","length":589},"id":"CVE-2026-53752-6de2636c","signature_type":"Function"},{"id":"CVE-2026-53752-6e55d19d","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOConversionContext.java"},"deprecated":false,"digest":{"line_hashes":["62338778388789721892122034529883963604","313375595396674377095787784874501639637","232269899582030116778926534543333905785","143210326254595289083935214925137805047","90896782313634133322862263006619038578","220654640589840119764091086335346867459","138885240555814388941558348875025040268","80738728458926536067930367643929489976"],"threshold":0.9}},{"target":{"function":"getBasedOnHeading","file":"docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java"},"deprecated":false,"digest":{"function_hash":"245761557565598687370086811237878422874","length":583},"id":"CVE-2026-53752-6f90c66c","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f"},{"deprecated":false,"digest":{"function_hash":"90059287622102730808959626962191550947","length":155},"id":"CVE-2026-53752-7215ab9b","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HTMLConversionContext.java","function":"HTMLConversionContext"}},{"deprecated":false,"digest":{"function_hash":"155801514267342146087844074666704299578","length":5429},"id":"CVE-2026-53752-74ae2064","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java","function":"fontSelector"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"generateTocEntryPPr"},"deprecated":false,"digest":{"function_hash":"154776232986387809907558642659716443174","length":1302},"id":"CVE-2026-53752-76168bcb"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java","function":"ListsToContentControls"},"deprecated":false,"digest":{"length":240,"function_hash":"132185259622760668083499042558682168919"},"id":"CVE-2026-53752-7b8f7fe5","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriterModel.java"},"deprecated":false,"digest":{"line_hashes":["139899971468091807120987051228537074575","14034517772910124817275887884413036701","217773203291444700578026529551505056578","311356747181915021166377177338823936175","5030718737970610165050231109077994609","16538066729754361131737365345997748594","132558375002047157859837343402304848169","163604388497092643723464433185432307067","305764551951256911618834710044903542609","51361859986119144828043481089933111276","302107242808998638710757154894873473493","332392996849399905530107882786517590964"],"threshold":0.9},"id":"CVE-2026-53752-7bcf2dc4","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["32099418726472368793553977319656288126","291723561313055032794963979481199409071","239796290657823707652175709173880059358","136155172917924176612719502970783979329","32115714230565008611258479251258331552","207456942680614125279041464462946755221","23354314820659325017011413746841870904","307130809595049667602590841390352400148"],"threshold":0.9},"id":"CVE-2026-53752-7e0eeab4","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/packages/PresentationMLPackage.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java","function":"process"},"deprecated":false,"digest":{"function_hash":"238099595653392947368739101218662367674","length":963},"id":"CVE-2026-53752-7f7eb9d1"},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java"},"deprecated":false,"digest":{"line_hashes":["199112857728822152811423519594580185420","334847016322113600617182031077144750483","36167333025390799033133528201303654366","319426003470416183694362258076177064688","104189023089826312420328485113428372170","268162467714635779508209480665605414091","177808691648473068986772243693885717652","323230400308107986797340783745582760885","173321458604809617239199927995845631571","262345199092148327533554024318780708727","72754549751116290823062842924415769039","54681910500300171191829972417858963629","272364385074564359630860353661025618439","324971906915461267393890053990455852159","157062960738808936367596581321830102296","268276974162782388033892731391809872026","245623244580543390490859092937418850785","62593734598856024489478170340286000267","88661989981654232336566253778629442761","30304461610789962571011629023788976565"],"threshold":0.9},"id":"CVE-2026-53752-831e6736","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"id":"CVE-2026-53752-85a506d3","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java","function":"getOutlineLvl"},"deprecated":false,"digest":{"function_hash":"204593930311270555139155639335014883590","length":683}},{"digest":{"function_hash":"254478115914323383830064847190956990502","length":129},"id":"CVE-2026-53752-89583265","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"function":"StyleTree","file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/OSwitch.java","function":"process"},"deprecated":false,"digest":{"length":359,"function_hash":"130831297542396636568455671885804572106"},"id":"CVE-2026-53752-8f55a85c"},{"digest":{"function_hash":"112855768844466340308128231552181453494","length":1096},"id":"CVE-2026-53752-92ead722","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java","function":"getDefaultFont"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["200054623028026971335852233570600184895","15361248568652531453379001806944825557","15298802527555376313320907428589147453","186648115197549478716501070523288243309","285970437712920161302834871193031738562","107619094983852544800709370614152553166","306185571652851291798820216973202205881","266272057410297725423563668313767048276","123189993720157852151193467647473437538","148410391474109021669235467899865631228"],"threshold":0.9},"id":"CVE-2026-53752-957008d6","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchProcessor.java"}},{"deprecated":false,"digest":{"function_hash":"62926043709607048795138675257622099664","length":74},"id":"CVE-2026-53752-97d7a77b","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java","function":"handleRPr"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/fonts/RunFontSelector.java"},"deprecated":false,"digest":{"line_hashes":["100425263596975024512108662256594494088","218046167044436981176159253812663555782","7358332658431084908567542398332612066","29895745390781246944696193608078393292","107348382836712987564857288295194678664","191007557972275999718047400294428626355","153884808226702002531272421391252081442","322152638033756894878834029618971533747","156473959577412182023803749997735404","90600582106101616228892596734247971171","141373654826110486782810160978877840083","227376955561733717425674903091898547532","204012124573383451569249422000020358835","30004912201944646721271969913113119406","215315763484505518309388456503296284534","158047700307072874681177514652201759621","182348501780738877151826339658995453034","336474690538278019484344731122399761363"],"threshold":0.9},"id":"CVE-2026-53752-97de3ada"},{"id":"CVE-2026-53752-99f8d782","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocGenerator.java","function":"populateToc"},"deprecated":false,"digest":{"function_hash":"237796904769822014267082360939149759435","length":1961}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/pptx4j/convert/out/svginhtml/SvgExporter.java","function":"createBlockForP"},"deprecated":false,"digest":{"length":2635,"function_hash":"85674118412238989435396726640551967974"},"id":"CVE-2026-53752-9d843eef","signature_type":"Function"},{"digest":{"line_hashes":["219526409675404762192569002473271339704","208604346916195145988782391150381520618","334903371699682916471909678145741100065","303542962299888338198687589662870565937","339939045893175187914254942823604845928","89432318571498101153042126664472953021","238698693337056459410425676961934547874","112293629676326483755036698235881783537","99078531458104569991708614815300470668","325952831400843048446765055524237654114","146878562128306516743387391030615966689","11818231652136467892568427815166734958","142973258138100475714994611562548726560","82536533795161389726966478295849330089","104941449039663193352087286744669267154","51738942600984746861970148881274043371","274830912660651489426867062404368309316","55369774163772827700939542695468950386","337700478193663597339733848862806049362","89183136916243849745337274850994599353","131772761492977050616050193489418127755","17672329038846800685790855478833139660","60075592926701506743382010013034956775","7578240408592065866120587709303334328","225930026915597686114539381207919447343","2079307124392366782228504916120615524","67270064152198489268090688952736718261","134361073757133850083904673132258166175","76181376231435499851213127658790770643","267936138868125143287898048839105445856","144048814896963174015300640501949208403","292740706536833059701777838378154915404","154339179939528662617241369529307200745","42220291528604702654845043686256313463","54233590289245654876344863596145136782","322528532597189662376482495054332850106","269245236698655515658267018817733198956","77430919327132486493938960504669613440","101130932912649753837064688408620578405","2386360067980395792713805928754922729","131822246706560043566412251617233698752","25793436927012558724280624409583764928","99893049967637949884458248313397889772"],"threshold":0.9},"id":"CVE-2026-53752-9de404d1","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/styles/StyleTree.java"},"deprecated":false},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"getPropertyResolver"},"deprecated":false,"digest":{"function_hash":"112879116710385546723367597607482445586","length":221},"id":"CVE-2026-53752-9e0aa512","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/HtmlExporterNonXSLT.java","function":"getCss"},"deprecated":false,"digest":{"function_hash":"296815560158313072802163884486146815882","length":207},"id":"CVE-2026-53752-9e288c0a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"76522405205992431929816379613980133292","length":429},"id":"CVE-2026-53752-a0d285a9","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"getStyleTree"}},{"digest":{"length":2311,"function_hash":"329698943008968814858611266004117769255"},"id":"CVE-2026-53752-a1a28466","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java","function":"createBlock"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["330558189541401702964744024272066164299","88436846289922252819376871292068858553","126586217382463775783461604666515161680","125897606052410568018932573424671715572","214927711466942993719626435131406403716","41221114774469222792032187598856847744","283754587607237645910818934031453479362","73106795042333986173415826948366591397","155983205281162124958284350670890814624","112657634803260415626940041917170408002","277965683079794538499027112113776514900","9088500985511141077211024440202453101","260883231914433445961851569173099336499","164784509271929664511278870560302008401","283754587607237645910818934031453479362","63211280080615812457626724580963213205","100855899347320153030603253133831434373","316510587041120824184866932358045610788","37533416535124188285052754321326091104"],"threshold":0.9},"id":"CVE-2026-53752-a3a5ea71","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java"}},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/USwitch.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["158611804778048662779438678213882391513","336499520006366697337901345516661057845","275195237812642228890206317300048894422","222355619682840552834216256849724021752","317541184287229042850856901843356913865","309810270609937515583178956425510191896","274681657083228006259151022908187298186","129843981486349262442318909983977820866","84359884710100844720656108694412979277","176661255261984393873001451236963759108","60983915425682298512231088116026925034"]},"id":"CVE-2026-53752-a4ce95c7","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/datastorage/BindingHyperlinkResolver.java"},"deprecated":false,"digest":{"line_hashes":["323863172958832670872756868063180360759","323558596043741824275129954753923450312","194443231741127691712326304907951930862","209643621780198167848999758993325438034","8525387441083145551562966942585430246","241115280550577757501691284764819296302","27841391850750484341491363787894223313","280353230786947205863088630031989393737"],"threshold":0.9},"id":"CVE-2026-53752-ab4573bf","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java","function":"createBlock"},"deprecated":false,"digest":{"function_hash":"72607292817704584917302499020879028714","length":3588},"id":"CVE-2026-53752-abe9f2c0","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"116727982442512433728033520187770508423","length":424},"id":"CVE-2026-53752-acce6479","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"getEffectiveRPr"}},{"id":"CVE-2026-53752-afae60f3","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/AbstractHTMLExporter3.java","function":"createContext"},"deprecated":false,"digest":{"function_hash":"44048246955009542667447780599946220922","length":212}},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java","function":"initializeStyleTree"},"deprecated":false,"digest":{"function_hash":"93598425575685145995798386842507795823","length":74},"id":"CVE-2026-53752-b1bf1468","signature_type":"Function"},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/listnumbering/Emulator.java","function":"getInd"},"deprecated":false,"digest":{"function_hash":"20002320488192907554547846845399938925","length":2316},"id":"CVE-2026-53752-b2d1c9ce","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"314384670569420497014348683247504065060","length":2677},"id":"CVE-2026-53752-b4d48e91","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java","function":"toNode"}},{"id":"CVE-2026-53752-b4d6bb72","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java"},"deprecated":false,"digest":{"line_hashes":["241454871354958810765513982605361745655","173437797956805035410516667427521760720","111011585147994797856240397551942174668","149253199549780472021559181191590277129","162828159874022246744294750799320756346","103643461385262687076102172105623701900","251771359660199376840825383656886395045","205669168709103300573532686462315610097","90318785404160791201489601771653506937","77996701497327278632951207976523078984","140801197124997734539298580094466319533","141648281089413942309642503572501695378","309933526351775888759323970296716593518","190463333219093989253393009514254033416","324689347639958552241424644640593851689","152926685115102676010688856910022456748"],"threshold":0.9}},{"id":"CVE-2026-53752-b5415dc2","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"createBlockForRPr","file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/XsltFOFunctions.java"},"deprecated":false,"digest":{"function_hash":"137081906186853286073218808917735576054","length":1356}},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/XsltCommonFunctions.java","function":"fontSelector"},"deprecated":false,"digest":{"function_hash":"275755220383955686486016517626772888159","length":1579},"id":"CVE-2026-53752-b6bcad3d","signature_type":"Function","signature_version":"v1"},{"target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOExporterVisitorGenerator.java"},"deprecated":false,"digest":{"line_hashes":["218137181989403271802443474623290286762","201932702976397628655581462970512056489","23624791424546823572377456898657676766","55093020298268096822424942918547028012","96847882625583621716025890893858981683","132436815159588707258846076381620414799","209645623012693352523807616460867785013","252289045701043284137057747423120848921","55535665589145461706913316601321518597","315042106823574621295856708200446307358","1113607577926318416268492910626609525","165940413093815095789717479960448736601","216964386414573321527890935608558334842","137470171482322685742891435423751011103","94590113627696508118378191353414664888","45111002840962233675366670572580724006"],"threshold":0.9},"id":"CVE-2026-53752-b908f262","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"deprecated":false,"digest":{"line_hashes":["262128628096812736533229344537367218774","190698874230103140712464214554603810618","29510543495712490893172893793575016903","242410460619274361832157332835917776523"],"threshold":0.9},"id":"CVE-2026-53752-bb1fdf32","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/SwitchInterface.java"}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/parts/WordprocessingML/MainDocumentPart.java","function":"fontsInUse"},"deprecated":false,"digest":{"function_hash":"217858946962996498590452024435833161178","length":2152},"id":"CVE-2026-53752-bb38bac3","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/AbstractFOExporter.java","function":"createContext"},"deprecated":false,"digest":{"function_hash":"60355034011623138876900316472966019290","length":107},"id":"CVE-2026-53752-bc94be7e","signature_type":"Function"},{"digest":{"length":106,"function_hash":"70785588797100392685109757347469133708"},"id":"CVE-2026-53752-bca42a5b","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"getEntryParagraph"},"deprecated":false},{"digest":{"line_hashes":["331637266762897857020807289673731218327","65495115972213956690399209777993906364"],"threshold":0.9},"id":"CVE-2026-53752-c01a1fc5","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/exceptions/PartTooLargeException.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"8076267442532408860368515020049851539","length":940},"id":"CVE-2026-53752-c4859787","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriter.java","function":"applyTableStyles"}},{"deprecated":false,"digest":{"function_hash":"298843802119359758232948069999274853752","length":318},"id":"CVE-2026-53752-c57f10d8","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/TocEntry.java","function":"getInd"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"function":"fillTableStyleStack","file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java"},"deprecated":false,"digest":{"function_hash":"46574959205112002872375381954441436063","length":582},"id":"CVE-2026-53752-c6d95686"},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["212632748327315234010296930926937609115","44686930217847810004927641160108544806","294888770853221613573409640907789981706","61302922601537938450710990035872275560","92996336301451030000681557130795471659","329790084798399474035848743334970643801","126503661701741243416878156416642335115","77488448420833042695052059407794397811","82757844291921540793454514009200785512","175857385036422896267553177997256541382","265545213811835494878563645804820221120","173222056757150511793256816198359380005","227550581132678880917788274030040394214","247050842917369032062536626096332974285","216523317180134794229499306707965027280","11926386026805349270681397058832753881","19881860006376632939352217934529371492","106978061182562262480295236460719400843"]},"id":"CVE-2026-53752-ca7044b9","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-53752-ca7e7367","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractWmlConversionContext.java","function":"getPropertyResolver"},"deprecated":false,"digest":{"function_hash":"266758488480849837082092937399342367540","length":74}},{"deprecated":false,"digest":{"function_hash":"62926043709607048795138675257622099664","length":74},"id":"CVE-2026-53752-cb3af921","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"function":"handlePPr","file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/AbstractVisitorExporterGenerator.java"}},{"digest":{"function_hash":"309142127522054259339117832435967353128","length":2052},"id":"CVE-2026-53752-cbdf0281","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java","function":"getCssForTableCells"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java"},"deprecated":false,"digest":{"line_hashes":["87888000601965501269476850646063875003","205522229996962753460753407803938011523","130620998354648005617906328286881868652","153738983403669482612739968160416033862","33083141263988072791796904405024603367","218943677823278952079455296448154022979","233532920804002262508321278872938873363","261315407303352461245880289723331383733","190350030496973252166463447996726686295","194041807616002541822520626915284990517","215102380473461167118627380090086421481","92770370846597254303319641886139801566","239293539528415113533218064704269297015","97895760394425264972798341639098099282","33614086822419888842027456828117094480","245233290115862085348624388304702009189","54570457356215533087777269513025672304","112665618417886014392493926275135737299"],"threshold":0.9},"id":"CVE-2026-53752-cea49e79"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectivePPr"},"deprecated":false,"digest":{"function_hash":"168760365506023358872152511346757968210","length":885},"id":"CVE-2026-53752-cf8748e5"},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/ParagraphStylesInTableFix.java","function":"getCellPStyle"},"deprecated":false,"digest":{"function_hash":"148643722464045104697588092459111550727","length":5214},"id":"CVE-2026-53752-d5c83c59","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-53752-d7a91e23","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/writer/AbstractTableWriterModel.java","function":"build"},"deprecated":false,"digest":{"function_hash":"286263186514379942726489175571945581359","length":1081}},{"deprecated":false,"digest":{"line_hashes":["301501683477927959864070455440349926870","210014083185992052411726041690177244906","126486747721223059541775963279693389403","144260236435307223477865258442084755700"],"threshold":0.9},"id":"CVE-2026-53752-e237cd50","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/ConversionFeatures.java"}},{"deprecated":false,"digest":{"line_hashes":["25652182235799429224235050942338719288","224854205280910624046579945719597480949","318799595007527095885075082458373597968","246441771203622198903178620765681433136","92053710947200208719335395438219372020","44882839115019983709018308036579220221","259329901840670476326544608170043962237"],"threshold":0.9},"id":"CVE-2026-53752-e2772c5d","signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/TSwitch.java"}},{"deprecated":false,"digest":{"function_hash":"74750647674036051562023179380708476060","length":640},"id":"CVE-2026-53752-e4c0ab8e","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/switches/TSwitch.java","function":"process"}},{"id":"CVE-2026-53752-e82d3197","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-export-fo/src/main/java/org/docx4j/convert/out/fo/FOConversionContext.java","function":"FOConversionContext"},"deprecated":false,"digest":{"function_hash":"101807652825886380326917135118315831103","length":193}},{"target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/XsltHTMLFunctions.java","function":"createBlockForRPr"},"deprecated":false,"digest":{"function_hash":"33421587645021950809108786948690060778","length":1685},"id":"CVE-2026-53752-e8bbec2c","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06"},{"source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/preprocess/FopWorkaroundReplacePageBreakInEachList.java"},"deprecated":false,"digest":{"line_hashes":["214541277893529201619057988210955970668","894965981452408318303838914291184755","334768167624164131991425758956853206758","74792820026190346939567776187585615896","263816450824961478901161076093785801862","89331372347795618090947553475554870862","227878983367334264907436044388126371607","287234041821709362428346623275866496549","319549974603701209439855302307295795394","161162444637749461207504157644439764642","138710722867878618404606458793875886678","246984711757802942307798937483388032974","148567040403712677021442334987107915949","231886368134130376287958996012687043715","317648628627577061141202547147016304420","213131118702022658649006460892333445782","8913341787595391101142830685596664437","123708137118796396018494848435407678302","112310885199692643323550696072323714021","4347024590766613771385212830930564955"],"threshold":0.9},"id":"CVE-2026-53752-e90f6b60","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/toc/StyleBasedOnHelper.java","function":"isBasedOn"},"deprecated":false,"digest":{"function_hash":"307864363785659480081205027966174946073","length":467},"id":"CVE-2026-53752-ee7ce023","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/common/XsltCommonFunctions.java"},"deprecated":false,"digest":{"line_hashes":["66836563644392005381160888015442862367","194894458524578191399297925800014735439","206828307555460334061246225964721237492","203654132048873094624055749004740321367","216699046513732421858625282448900664644","252032237847641434982134418579471724352","286535121932327218942133382216757296592","105976223341964801198312342363126837287"],"threshold":0.9},"id":"CVE-2026-53752-f286f894"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveTableStyle"},"deprecated":false,"digest":{"function_hash":"37085038595442681990982466407824175","length":858},"id":"CVE-2026-53752-f561c5d2","signature_type":"Function"},{"digest":{"function_hash":"181157027508993066909696098133900325687","length":808},"id":"CVE-2026-53752-f5ad762e","signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/47b528c7dd4c81bcfc8e7fe9df7610c60446f95f","target":{"file":"docx4j-core/src/main/java/org/docx4j/model/PropertyResolver.java","function":"getEffectiveRPrUsingPStyleRPr"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/openpackaging/packages/PresentationMLPackage.java","function":"getStyleTree"},"deprecated":false,"digest":{"function_hash":"138441734673524049077448455744228466867","length":412},"id":"CVE-2026-53752-f6adb9f1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/ListsToContentControls.java","function":"process"},"deprecated":false,"digest":{"function_hash":"329768675572987496153974347603234731105","length":188},"id":"CVE-2026-53752-fb745e44"},{"signature_version":"v1","source":"https://github.com/plutext/docx4j/commit/e06cafb334089f0be02e1c63a7c0a602bd44bf06","target":{"file":"docx4j-core/src/main/java/org/docx4j/convert/out/html/AbstractHTMLExporter3.java"},"deprecated":false,"digest":{"line_hashes":["80839173876838328321521190221962242957","210687051231671397748123767403644406679","289911198794766633771863814078678673193","233364863709305464640982247677523857723","3922760906642017229352317095434621891","317634684303995314950630518761323063190","259589648470381423941537654441440755797","92093609148274516852637167513949416321"],"threshold":0.9},"id":"CVE-2026-53752-fd45ec36","signature_type":"Line"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}