CVE-2026-92230

A flaw was found in Apache Karaf's XmlUtils. This vulnerability arises from the caching of XML parser and transformer factories in static ThreadLocal fields within long-lived container threads. Repeated operations such as installing, updating, or refreshing OSGi Open Services Gateway initiative...