News · via oss-security
CVE-2026-49236: Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checks
Posted by Simon Steiner on Nov 11 Severity: moderate Affected versions: - Apache XML Graphics Batik 1.19 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik…