CVE-2026-49236

Vendor

Apache Software Foundation

Product

Apache XML Graphics Batik

Weakness

CWE-918

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 2h ago

   Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik.

   Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are…

   Fix available CVE-2026-49236 Apache Software Foundation