Description
Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol
This issue affects Apache XML Graphics Batik: through 1.19.
Users are recommended to upgrade to version 1.20, which fixes the issue.
Metrics
No CVSS score has been published yet.
Weakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache XML Graphics Batik | <= 1.19.0 |
References
Timeline
- Published
- Nov 11, 2026
- Last modified
- Nov 12, 2026
- NVD status
- Awaiting Analysis