- Latest release
- 2.2.0 (Feb 5, 2026): no advisory affects it
- Newest unaffected release
- 2.2.0 (Feb 5, 2026), the latest release
- Advisories
- 1 · 1 critical
- Dependents
- 2
- Releases
- 22 since 0.9.2 (Sep 29, 2011)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2025-64087Affects 0.9.2 to 2.1.0 (2.2.0 is outside it)
Advisories 1
- CVE-2025-64087Critical 9.8
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows…
Affected: fixed in 2.2.0.
Fixed in 2.2.0 (released Feb 5, 2026, 16 days after disclosure).
The latest release, 2.2.0, is not affected.