I wanted to upgrade Apache POI from Katalon existing 3.17 to 4.1.2, but when I do that I encounter other problem with existing Katalon feature.
Library management in Katalon Studio | Katalon Docs
I just realized in the documentation that we are not supposed to remove 3.17 library.
So my question is there any other way to use newer version of Apache POI with Katalon Studio without it conflicting with current Katalon feature?
Apache POI are listed as non-excludable libraries, so you can’t replace these libraries.
The Exclude built-in libraries feature allows you to remove built-in libraries stored in the
.classpathfile of a project folder. This feature applies to all libraries in the.classpathfile, excluding the following:
com.kms.katalon.*.jarselenium-server-standalone-3.141.59.jarpoi-3.17.jarpoi-ooxml-3.17.jarpoi-ooxml-schemas-3.17.jarjava-client-7.0.0.jario.cucumber.*.jarso there is no way to use newer version of poi with katalon?
Yes, you may request Studio team to update these libraries instead
Why do you want the POI v4.1.2 at all?
Are you concerned about vulnerability?
My existing script for reading and writing XLSX files is encountering issues with Apache POI 3.17. While it used to function correctly, the test environment has undergone an upgrade, leading to the problem. I attempted to address this by switching to POI 4.1.2, and the script runs smoothly. However, there are some error using existing Katalon features due to compatibility issue I think
“My existing script” ---- is it a script that has been working inside Katalon Studio, or outside Katalon Studio?
i wrote custom keyword in Katalon to read and write XLSX file
I believe, the POI v3.17 provides enough API to read / write XLSX files. Therefore I suppose you would be able to write your custom keyword operational on the POI v3.17. Any reason you need v4.1.2?
I encountered error as the following when using excel related action; on developer end, they believe that its due to old POI version that we are using
Reason:
org.codehaus.groovy.runtime.InvokerInvocationException: java.io.IOException: Failed to read zip entry source
at DateConversion.invokeMethod(DateConversion.groovy)
at com.kms.katalon.core.main.CustomKeywordDelegatingMetaClass.invokeStaticMethod(CustomKeywordDelegatingMetaClass.java:55)
at S10_TC001 - Create Global Parts (Admin).run(S10_TC001 - Create Global Parts (Admin):47)
at com.kms.katalon.core.main.ScriptEngine.run(ScriptEngine.java:194)
at com.kms.katalon.core.main.ScriptEngine.runScriptAsRawText(ScriptEngine.java:119)
at com.kms.katalon.core.main.TestCaseExecutor.runScript(TestCaseExecutor.java:448)
at com.kms.katalon.core.main.TestCaseExecutor.doExecute(TestCaseExecutor.java:439)
at com.kms.katalon.core.main.TestCaseExecutor.processExecutionPhase(TestCaseExecutor.java:418)
at com.kms.katalon.core.main.TestCaseExecutor.accessMainPhase(TestCaseExecutor.java:410)
at com.kms.katalon.core.main.TestCaseExecutor.execute(TestCaseExecutor.java:285)
at com.kms.katalon.core.main.TestCaseMain.runTestCase(TestCaseMain.java:144)
at com.kms.katalon.core.main.TestCaseMain.runTestCase(TestCaseMain.java:135)
at com.kms.katalon.core.main.TestCaseMain$runTestCase$0.call(Unknown Source)
at TempTestCase1700701915485.run(TempTestCase1700701915485.groovy:25)
Caused by: java.io.IOException: Failed to read zip entry source
at org.apache.poi.openxml4j.opc.ZipPackage.(ZipPackage.java:103)
at org.apache.poi.openxml4j.opc.OPCPackage.open(OPCPackage.java:324)
at org.apache.poi.util.PackageHelper.open(PackageHelper.java:37)
at org.apache.poi.xssf.usermodel.XSSFWorkbook.(XSSFWorkbook.java:295)
at copyToExcel.exel2(copyToExcel.groovy:51)
at DateConversion.invokeMethod(DateConversion.groovy)
at com.kms.katalon.core.main.CustomKeywordDelegatingMetaClass.invokeStaticMethod(CustomKeywordDelegatingMetaClass.java:55)
at Script1692168280247.run(Script1692168280247.groovy:47)
… 11 more
Caused by: java.util.zip.ZipException: invalid entry size (expected 0 but got 1711 bytes)
at org.apache.poi.openxml4j.util.ZipSecureFile$ThresholdInputStream.read(ZipSecureFile.java:220)
at org.apache.poi.openxml4j.util.ZipInputStreamZipEntrySource$FakeZipEntry.(ZipInputStreamZipEntrySource.java:132)
at org.apache.poi.openxml4j.util.ZipInputStreamZipEntrySource.(ZipInputStreamZipEntrySource.java:56)
at org.apache.poi.openxml4j.opc.ZipPackage.(ZipPackage.java:100)
at org.apache.poi.openxml4j.opc.OPCPackage.open(OPCPackage.java:324)
at org.apache.poi.util.PackageHelper.open(PackageHelper.java:37)
at org.apache.poi.xssf.usermodel.XSSFWorkbook.(XSSFWorkbook.java:295)
at copyToExcel.exel2(copyToExcel.groovy:51)
at DateConversion.invokeMethod(DateConversion.groovy)
at com.kms.katalon.core.main.CustomKeywordDelegatingMetaClass.invokeStaticMethod(CustomKeywordDelegatingMetaClass.java:55)
at S10_TC001 - Create Global Parts (Admin).run(S10_TC001 - Create Global Parts (Admin):47)
… 11 more
I found a similar issues：
Anyway, it seems you need a newer version of POI to read the XLSX file. But Katalon Studio does not allow you to. Therefore, no way you have. Perhaps you want to quit using Katalon Studio and find something else.
Or, you have a final workaround: you want to create a CSV file from the XLSX file, and pass the CSV to KS.
I think Katalon should consider upgrading POI version.
To me, your “copyToExcel” does just copying a xlsx file to another. For that, you do not need PO at all. See
Thank you for letting us know. I will note it down
actually its a function to write to excel not copy the excel as its name
Alternate, try to save the excel file as legacy (2007 i think) .xls.
Older Apache POI may work fine with this format
I would change the title of this topic from
“Use of Apache 4.1.2 in Katalon Studio 8.6.8”
to
“Use of POI 4.1.2 in Katalon Studio 8.6.8”
I’d also like to add some input to this post and request an update to POI (I’ve also submitted a support ticket).
We’re currently using KS 9.7.4 and cannot update to 10.x due to Desktop testing which WAD isn’t supported for in 10.x and waiting on Katalons solution to that…there was a CVE report ( CVE Record: CVE-2025-31672) released recently that indicates vulnerabilities in Apache POI prior to version 5.4.X and recomends updating to 5.4.0 at a min to clear that vulnerability.
Our cyber team has flagged this vulnerability and wants it patched. They’ve indicated that the 10.x series does not have this vulnerability, although, as mentioned due to desktop testing, updating to 10.x is not currently an option for us.
I am afraid that Katalon would not notice your request in this casual user forum.
I think that you should raise an official Support request to Katalon through https://katalon-inc.my.site.com/support/article/How-to-submit-a-Support-Case
I did submit a ticket with them, but figured I’d post here as well for a little extra visibility.
Hi all,
This issue has been solved in v11.0.0. Please help validate and let us know if it works/ not work. Thank you