๐Ÿ” CVE Alert

CVE-2026-89326

UNKNOWN 0.0

Apache XML Graphics Batik: Check url protocol when loading document

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

CWE CWE-346
Vendor apache software foundation
Product apache xml graphics batik
Published Nov 11, 2026
Last Updated Nov 11, 2026
Stay Ahead of the Next One

Get instant alerts for apache software foundation apache xml graphics batik

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache xml graphics batik are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Apache Software Foundation / Apache XML Graphics Batik
0 โ‰ค 1.19.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
lists.apache.org: https://lists.apache.org/thread.html/j52wbxhp9wmysor6kdyqjnjz7pqnsthj issues.apache.org: https://issues.apache.org/jira/browse/BATIK-1398 openwall.com: http://www.openwall.com/lists/oss-security/2026/11/11/21