Skip to content
NewA calmer, faster ZeroHour

CVE-2026-111792: Apache XML Graphics Batik: Denial of Service via SVG Element Reference Resolution

oss-security ()
Part of a story covered by 8 sourcesCVE-2026-71395: Apache XML Graphics FOP: CWE-502 unsafe deserialization in hyphenation loadingMerged summary & timeline

CVE-2026-111792: Apache XML Graphics Batik: Denial of Service via SVG Element Reference Resolution

Severity: moderate

Analyze CVE-2026-111792 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-111792
Uncontrolled recursion DoS in Apache Batik through 1.19
——

From the original article

Posted by Simon Steiner on Nov 11 Severity: moderate https://issues. apache. org/jira/browse/BATIK-1397 https://xmlgraphics.

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.