Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0509
http://xml.apache.org/batik/#SecurityWarning