https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:52:03.500170+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 certfr-2025-avi-0661 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Elles permettent à un attaquant de provoquer… 2026-10-02T20:52:03.512824+00:00 certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-257687 EUVD-2026-257687 2026-10-02T20:52:03.512864+00:00 EUVD-2026-257687 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40146 fkie_cve-2022-40146 2026-10-02T20:52:03.512879+00:00

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

 https://cve.radiocsirt.org/vuln/ghsa-h4qg-p7r2-cpg3 GHSA-h4qg-p7r2-cpg3 — Apache Batik vulnerable to Server-Side Request Forgery 2026-10-02T20:52:03.512907+00:00

Affected: Maven: org.apache.xmlgraphics:batik

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

 https://cve.radiocsirt.org/vuln/gsd-2022-40146 gsd-2022-40146 2026-10-02T20:52:03.512929+00:00 gsd-2022-40146 https://cve.radiocsirt.org/vuln/oesa-2023-1651 OESA-2023-1651 — batik security update 2026-10-02T20:52:03.512940+00:00

Affected: openEuler:20.03-LTS-SP1: batik, openEuler:20.03-LTS-SP3: batik, openEuler:22.03-LTS: batik, openEuler:22.03-LTS-SP1: batik, openEuler:22.03-LTS-SP2: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38398) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-38648) Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.(CVE-2022-40146) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. (CVE-2022-44729) Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. A malicious SVG can probe user profile / data and send it directly as parameter to a URL. (CVE-2022-44730)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12363-1 openSUSE-SU-2024:12363-1 — xmlgraphics-batik-1.15-1.1 on GA media 2026-10-02T20:52:03.512981+00:00

xmlgraphics-batik-1.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update 2026-10-02T20:52:03.513020+00:00

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

 https://cve.radiocsirt.org/vuln/suse-su-2024:0777-1 SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik 2026-10-02T20:52:03.513093+00:00

Security update for xmlgraphics-batik

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40146 UBUNTU-CVE-2022-40146 2026-10-02T20:52:03.513113+00:00

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:22.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0132 WID-SEC-W-2023-0132 — Oracle Fusion Middleware: Mehrere Schwachstellen 2026-10-02T20:52:03.513141+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.