News · via oss-security
CVE-2026-40853: Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont
Posted by Simon Steiner on Nov 11 Severity: moderate Affected versions: - Apache XML Graphics Batik 1.19 Description: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont…