Apache Batik has a moderate SSRF flaw (CVE-2026-44929)
Original title: CVE-2026-44929: SSRF Vulnerability in Apache Batik
Simon Steiner posted the moderate-severity issue on November 11, with links to the CVE and BATIK-1393.
An oss-security post reports a server-side request forgery vulnerability in Apache Batik, tracked as CVE-2026-44929. The post rates severity as moderate and points to the Apache XML Graphics project, the CVE record, and Apache Jira issue BATIK-1393. The snippet gives no affected versions, fixed release, or exploitation status.
Unconfirmed: Affected versions, a fix, and exploitation are not stated in the snippet.
- Severity is listed as moderate.
- The report links CVE-2026-44929 and Jira issue BATIK-1393.
- Posted by Simon Steiner on November 11.
Impact: server-side request forgery
| Product | Affected |
|---|---|
| Apache Batik | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-44929 | SSRF in Apache XML Graphics Batik through 1.19 | — | — |
From the original article
Posted by Simon Steiner on Nov 11 Severity: moderate https://xmlgraphics. apache. org/ https://www.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.