CVE-2026-90993

Description

XXE vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

References

https://lists.apache.org/thread.html/cnl5g2os5w048h32x50v1xgjnyo8y6vs

https://issues.apache.org/jira/browse/BATIK-1399

http://www.openwall.com/lists/oss-security/2026/11/11/20

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3