Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

CVE-2026-40853: Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont

oss-security ()
Read at seclists.org
Part of a story covered by 8 sourcesCVE-2026-71395: Apache XML Graphics FOP: CWE-502 unsafe deserialization in hyphenation loadingMerged summary & timeline
AI summarySummaries by Vani AI

CVE-2026-40853: Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont

Severity: moderate

Analyze CVE-2026-40853 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-40853
Tags
cve-2026-40853vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-40853
XSS in Apache Batik SVGFont via unencoded font metadata
——

From the original article

Posted by Simon Steiner on Nov 11 Severity: moderate https://xmlgraphics. apache. org/...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.