CVE-2026-40853oss-security3h agoCVE-2026-40853: Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont8 sourcescve-2026-40853vulnerability