CVE-2026-71395

Description

unsafe deserialization in hyphenation loading vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: through 2.11. Users are recommended to upgrade to version 2.12, which fixes the issue.

References

https://lists.apache.org/thread.html/nsb89to1r0vzdh3t4w7x10q4z3xk5jqf

https://issues.apache.org/jira/browse/FOP-3332

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123531

http://www.openwall.com/lists/oss-security/2026/11/11/19

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3