XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via FopProducer in the FOP component. When an alternative JAXP TransformerFactory is on the classpath, an attacker can make the Camel process read files it can access or send requests to...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858

The camel-fop component in Apache Camel is vulnerable to XML External Entity (XXE) injection when a third-party JAXP TransformerFactory (such as Saxon-HE ) is present on the classpath. The FopProducer uses TransformerFactory.newInstance() and only enables FEATURE_SECURE_PROCESSING. While this pro...

EUVD-2026-104208

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858 Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Present

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

PT-2026-117366

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURE SECURE PROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-91858: Improper Restriction of XML External Entity Reference

FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURESECUREPROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...

CVE-2026-101016

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

CVE-2026-101016

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

PT-2026-99816

Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenDMARC versions prior to 1.4.3 Description An issue exists in the opendmarc policy parse dmarc function within the libopendmarc/opendmarc policy.c library. Remote exploitation is possible through the manipulation of t...

org.docx4j:docx4j-diffx (8.1.0), org.docx4j:docx4j-docx-anon (8.1.0) +4 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.0)

org.docx4j:docx4j-core MAVEN version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.0 - org.docx4j:docx4j-docx-anon 8.1.0 - org.docx4j:docx4j-export-fo 8.1.0 -...

cn.bctools:jvs-starter-word (1.1.0), org.docx4j:docx4j-diffx (8.1.1) +5 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.1)

org.docx4j:docx4j-core MAVEN version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - cn.bctools:jvs-starter-word 1.1.0 - org.docx4j:docx4j-diffx 8.1.1 - org.docx4j:docx4j-docx-anon 8.1.1 -...

com.vladsch.flexmark:flexmark-docx-converter (>=0.50.24, <=0.61.10), org.docx4j:docx4j-diffx (8.1.2) +8 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.2)

org.docx4j:docx4j-core MAVEN version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.vladsch.flexmark:flexmark-docx-converter =0.50.24, =0.61.10 - org.docx4j:docx4j-diffx 8.1.2 -...

org.docx4j:docx4j-diffx (8.1.3), org.docx4j:docx4j-docx-anon (8.1.3) +7 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.3)

org.docx4j:docx4j-core MAVEN version 8.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - org.docx4j:docx4j-diffx 8.1.3 - org.docx4j:docx4j-docx-anon 8.1.3 - org.docx4j:docx4j-export-fo 8.1.3 -...

cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Summary cosmiankyber is a fork of Argyle-Software/kyber and inherits a broken constant-time conditional-move routine cmov in its AVX2 backend. When built with the opt-in avx2 feature on x8664, cmov is a no-op: it never performs the copy. That cmov is the step that applies the Fujisaki-Okamoto FO...

RUSTSEC-2026-0288 cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery

Summary cosmiankyber is a fork of Argyle-Software/kyber and inherits a broken constant-time conditional-move routine cmov in its AVX2 backend. When built with the opt-in avx2 feature on x8664, cmov is a no-op: it never performs the copy. That cmov is the step that applies the Fujisaki-Okamoto FO...

at.molindo.social:spring-social-security (1.1.0.release), cc.fozone.validation:fo-validation (>=0.9.0.release, <=0.9.1.release) +489 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (3.2.8.release)

org.springframework:spring-expression MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release -...

[SECURITY] Fedora 40 Update: xmlgraphics-commons-2.9-3.fc40

Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO. You will find components such as a PDF library, an RTF library, Graphics2D...