Server-Side Request Forgery Vulnerability in Apache XML Graphics Batik
CVE-2026-44929

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Xml Graphics Batik
Vendor
CVE Published:
11 November 2026

What is CVE-2026-44929?

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache XML Graphics Batik, affecting versions prior to 1.20. This flaw can allow an attacker to manipulate the server into making unauthorized requests, potentially leading to sensitive information exposure. It is crucial for users to upgrade to version 1.20 to mitigate this vulnerability and safeguard their systems.

Affected Version(s)

Apache XML Graphics Batik 0 <= 1.19.0

References

https://lists.apache.org/thread.html/d9zfzmjr8frhylopnq4r...
vendor-advisory
https://issues.apache.org/jira/browse/BATIK-1393
issue-tracking

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.