Opensagres Xdocreport vulnerabilities

• opensagres xdocreport XDocReport affected by an XML External Entity (XXE) vulnerability CVE-2025-65482 Public exploitFix available 9.8 CriticalJanuary 20, 2026
• opensagres xdocreport XDocReport affected by a Server-Side Template Injection (SSTI) vulnerability CVE-2025-64087 Public exploitFix available 9.8 CriticalJanuary 20, 2026