PT-2026-145227

CVE-2026-40853

Published

2026-11-11

Updated

2026-11-11

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont.

This issue affects Apache XML Graphics Batik: through 1.19.

Users are recommended to upgrade to version 1.20, which fixes the issue.

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾