docx4j 11.5.14 is now available.
This is an important security update because it addresses a potential denial of service attack against
an application that processes untrusted or erroneous docx files.
Thanks to https://github.com/Isopach for the report.
To get this release, please see https://www.docx4java.org/downloads.html
Changes in this release:
- PDF via FO: in multi-threaded environments, support use of a single FopFactory, configuring
fonts on a per-document basis, or a new FopFactory per export (if you prefer).
- Security update: Detect malformed documents containing cyclic styles.
Property docx4j.openpackaging.exceptions.CyclicStylesException.throw
controls whether the detector throws an exception or not.
docx4j-ImportXHTML 11.5.14 is also released:
- Align with docx4j 11.5.14 release; handle CyclicStylesException
- Bump org.apache.pdfbox deps from 3.0.5 to 3.0.7 to align with docx4j.

