Apache XML Graphics Batik

Search everything

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenNov 11, 2026
Last mentioned3h ago

Timeline

3 articles · newest first

Apache Batik must check URL protocol when loading documents (CVE-2026-89326)

Apache rates the XML Graphics Batik issue moderate; the notice lists no versions, fix, or exploitation.

oss-security17:21 UTC · 3h agoVulnerability 8 sourcesCVE-2026-89326

Apache Batik hardens SAXDocumentFactory validation (CVE-2026-90993)

Apache rates the issue moderate and cites BATIK-1399, with no versions, fix, or exploitation status.

oss-security17:19 UTC · 3h agoVulnerability 8 sourcesCVE-2026-90993

Batik SVG color-profile xml:base bypasses same-origin checks (CVE-2026-49236)

Apache rates the Batik external-resource bypass moderate; the oss-security note does not list versions or a fix.

oss-security17:15 UTC · 3h agoVulnerability 8 sourcesCVE-2026-49236

Related CVEs

by mentions

CVE-2026-49236—
SSRF in Apache Batik via SVG color-profile xml:base
published 6h agoApache XML Graphics Batik
CVE-2026-89326—
Origin validation error in Apache Batik through 1.19
published 5h agoApache XML Graphics Batik
CVE-2026-90993—
XXE in Apache XML Graphics Batik through 1.19
published 9h agoApache XML Graphics Batik

Appears with

Apachevendor · 3

Entities are extracted by the model from each article. First seen Nov 11, 2026, last mentioned 3h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.