Batik SVG color-profile xml:base bypasses same-origin checks (CVE-2026-49236)
Apache rates the Batik external-resource bypass moderate; the oss-security note does not list versions or a fix.
1 stories, newest first · one card per story
Apache rates the Batik external-resource bypass moderate; the oss-security note does not list versions or a fix.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views