https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:24:45.868157+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 certfr-2025-avi-0661 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Elles permettent à un attaquant de provoquer… 2026-10-03T05:24:45.991640+00:00 certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-257681 EUVD-2026-257681 2026-10-03T05:24:45.991680+00:00 EUVD-2026-257681 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38648 fkie_cve-2022-38648 2026-10-03T05:24:45.991696+00:00

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

 https://cve.radiocsirt.org/vuln/ghsa-53jm-3hc9-fqqc GHSA-53jm-3hc9-fqqc — Apache Batik vulnerable to Server-Side Request Forgery 2026-10-03T05:24:45.991726+00:00

Affected: Maven: org.apache.xmlgraphics:batik, Maven: org.apache.xmlgraphics:batik-bridge

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik Bridge versions 1.14 and below.

 https://cve.radiocsirt.org/vuln/gsd-2022-38648 gsd-2022-38648 2026-10-03T05:24:45.991781+00:00 gsd-2022-38648 https://cve.radiocsirt.org/vuln/oesa-2023-1651 OESA-2023-1651 — batik security update 2026-10-03T05:24:45.991808+00:00

Affected: openEuler:20.03-LTS-SP1: batik, openEuler:20.03-LTS-SP3: batik, openEuler:22.03-LTS: batik, openEuler:22.03-LTS-SP1: batik, openEuler:22.03-LTS-SP2: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38648) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-40146) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. (CVE-2022-44729) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL. (CVE-2022-44730)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12363-1 openSUSE-SU-2024:12363-1 — xmlgraphics-batik-1.15-1.1 on GA media 2026-10-03T05:24:45.991843+00:00

xmlgraphics-batik-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update 2026-10-03T05:24:45.991862+00:00

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

 https://cve.radiocsirt.org/vuln/suse-su-2024:0777-1 SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik 2026-10-03T05:24:45.991931+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-38648 UBUNTU-CVE-2022-38648 2026-10-03T05:24:45.991952+00:00

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:22.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0881 WID-SEC-W-2023-0881 — IBM Maximo Asset Management: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-03T05:24:45.991980+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um Informationen offenzulegen.