CVE-2026-44929

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

References

https://lists.apache.org/thread.html/d9zfzmjr8frhylopnq4r7ojwcfk9hbjg

https://issues.apache.org/jira/browse/BATIK-1393

http://www.openwall.com/lists/oss-security/2026/11/11/17

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3