jOpenDocument has an improper restriction of XML external entity reference vulnerability
Date: 2026-05
Affected: maven/org.jopendocument:jOpenDocument
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2026-6501
CWE: CWE-611

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.


Mitigations:

Architectural layers (MAESTRO):