Improper XML Handling in Apache Abdera by Apache

CVE-2026-113582

What is CVE-2026-113582?

An improper restriction of XML external entity references in Apache Abdera permits attackers to access sensitive data or initiate server-side requests. The vulnerability arises when applications parse XML inputs that are controlled by an attacker. Since Apache Abdera is retired and unsupported, there will be no patches released for this issue. Users are advised to transition to actively maintained alternatives. For applications that cannot migrate, it is crucial to prevent untrusted XML from being processed by the vulnerable parser or JDBC adapter paths. Moreover, downstream products using affected Abdera artifacts may still be at risk.

References