CVE-2026-90993
Severity CVSS v4.0:
Pending analysis
Type:
CWE-611
Improper Restriction of XML External Entity Reference ('XXE')
Publication date:
11/11/2026
Last modified:
11/11/2026
Description
XXE vulnerability in Apache XML Graphics Batik.<br />
<br />
<br />
<br />
This issue affects Apache XML Graphics Batik: through 1.19.<br />
<br />
<br />
<br />
Users are recommended to upgrade to version 1.20, which fixes the issue.