com.helger.kaltblut:kaltblut-cli (>=0.9.0, <=0.9.1), com.helger.kaltblut:kaltblut-verapdf (>=0.9.0, <=0.9.1) +14 more potentially affected by CVE-2026-54082 via org.verapdf:validation-model-jakarta (>=1.24.1, <=1.30.1)

org.verapdf:validation-model-jakarta MAVEN version =1.24.1, =0.9.0, =0.9.0, =2.1.0, =6.0, =6.0, =6.0, =0.5.0, =0.7.2, =0.6.0, =6.0.d4j.1, =6.0.d4j.1, =6.0.d4j.1, =2.20.0, =2.12.0, =3.2.0, =3.5.0 and more Source cves: CVE-2026-54082 Source advisory: MEND:CVE-2026-54082...

CVE-2026-54082

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate... and GFPDAcroForm.getdynamicRender, where default DocumentBuilderFactory parsing of...

com.helger.kaltblut:kaltblut-cli (>=0.9.0, <=0.9.1), com.helger.kaltblut:kaltblut-verapdf (>=0.9.0, <=0.9.1) +14 more potentially affected by CVE-2026-54078 via org.verapdf:validation-model-jakarta (>=1.26.1, <=1.30.1)

org.verapdf:validation-model-jakarta MAVEN version =1.26.1, =0.9.0, =0.9.0, =2.1.0, =6.0.1, =6.0.1, =6.0.1, =0.5.0, =0.7.2, =0.6.0, =6.0.1.d4j.1, =6.0.1.d4j.1, =6.0.1.d4j.1, =2.20.0, =2.12.0, =3.2.0, =3.5.0 and more Source cves: CVE-2026-54078 Source advisory: GHSA-3JH7-WM29-Q568...

GHSA-3JH7-WM29-Q568 veraPDF Validation XXE via Rich Text

Summary Description An XML External Entity Injection CWE-611 vulnerability in veraPDF allows a remote attacker to read arbitrary files on the server file system and perform Server-Side Request Forgery by submitting a crafted PDF containing a malicious rich-text /RC or /RV entry. This affects all...

CVE-2026-54078 veraPDF Validation XXE via Rich Text

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/DictionaryKeysHelper.java in...

CVE-2026-54078

The VeraPDF validation project contains an XXE vulnerability in the validation-model module (DictionaryKeysHelper.getRichTextStringOrStreamEntryStringRepresentation). A crafted PDF with malicious rich-text /RC or /RV entries can trigger external entity expansion and reflect local file contents in...

com.helger.kaltblut:kaltblut-cli (>=0.9.0, <=0.9.1), com.helger.kaltblut:kaltblut-verapdf (>=0.9.0, <=0.9.1) +14 more potentially affected by CVE-2026-54079 via org.verapdf:validation-model-jakarta (>=1.24.1, <=1.30.1)

org.verapdf:validation-model-jakarta MAVEN version =1.24.1, =0.9.0, =0.9.0, =2.1.0, =6.0, =6.0, =6.0, =0.5.0, =0.7.2, =0.6.0, =6.0.d4j.1, =6.0.d4j.1, =6.0.d4j.1, =2.20.0, =2.12.0, =3.2.0, =3.5.0 and more Source cves: CVE-2026-54079 Source advisory: OSV:GHSA-36MM-W85J-3Q2J...

veraPDF Validation XXE via XFA

Summary Description An XML External Entity Injection CWE-611 vulnerability in veraPDF allows a remote attacker to read arbitrary files on the server file system and perform Server-Side Request Forgery by submitting a crafted PDF containing a malicious XFA stream. This affects all current versions...

com.helger.kaltblut:kaltblut-cli (>=0.9.0, <=0.9.1), com.helger.kaltblut:kaltblut-verapdf (>=0.9.0, <=0.9.1) +14 more potentially affected by CVE-2026-54079 via org.verapdf:validation-model-jakarta (>=1.24.1, <=1.30.1)

org.verapdf:validation-model-jakarta MAVEN version =1.24.1, =0.9.0, =0.9.0, =2.1.0, =6.0, =6.0, =6.0, =0.5.0, =0.7.2, =0.6.0, =6.0.d4j.1, =6.0.d4j.1, =6.0.d4j.1, =2.20.0, =2.12.0, =3.2.0, =3.5.0 and more Source cves: CVE-2026-54079 Source advisory: GHSA-36MM-W85J-3Q2J...

com.helger.kaltblut:kaltblut-cli (>=0.9.0, <=0.9.1), com.helger.kaltblut:kaltblut-verapdf (>=0.9.0, <=0.9.1) +14 more potentially affected by CVE-2026-54079 via org.verapdf:validation-model-jakarta (>=1.24.1, <=1.30.1)

org.verapdf:validation-model-jakarta MAVEN version =1.24.1, =0.9.0, =0.9.0, =2.1.0, =6.0, =6.0, =6.0, =0.5.0, =0.7.2, =0.6.0, =6.0.d4j.1, =6.0.d4j.1, =6.0.d4j.1, =2.20.0, =2.12.0, =3.2.0, =3.5.0 and more Source cves: CVE-2026-54079 Source advisory: MEND:CVE-2026-54079...

PT-2026-65821

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/DictionaryKeysHelper.java in...

CVE-2026-54078: Improper Restriction of XML External Entity Reference

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/DictionaryKeysHelper.java in...