org.xwiki.rendering:xwiki-rendering-macro-html (9.5), org.xwiki.rendering:xwiki-rendering-standalone (9.5) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.6), org.xwiki.rendering:xwiki-rendering-standalone (9.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.11-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.11-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.11-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.11-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.11-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.2.7), org.xwiki.rendering:xwiki-rendering-standalone (6.2.7) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.2.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.2.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.1), org.xwiki.rendering:xwiki-rendering-standalone (12.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.6), org.xwiki.rendering:xwiki-rendering-standalone (11.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3.7), org.xwiki.rendering:xwiki-rendering-standalone (11.3.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (13.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.9), org.xwiki.rendering:xwiki-rendering-standalone (13.9) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.9)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.9 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.10.3), org.xwiki.rendering:xwiki-rendering-standalone (12.10.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.10.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.10.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.2), org.xwiki.rendering:xwiki-rendering-standalone (11.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.5), org.xwiki.rendering:xwiki-rendering-standalone (11.5) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.1), org.xwiki.rendering:xwiki-rendering-standalone (10.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3), org.xwiki.rendering:xwiki-rendering-standalone (11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.1-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (8.1-milestone-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.1-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.1-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.1-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.6), org.xwiki.rendering:xwiki-rendering-standalone (10.11.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.1-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (7.1-milestone-2) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.1-milestone-2 -...

CVE-2026-74908

Grav plugin-api before version 1.0.15 has a script injection flaw: its SVG sanitizer checks only the exact extension "svg", so attackers with api.media.write permission can upload .svgz or .xhtml files with script payloads that bypass sanitization and execute in the site origin when accessed. CVS...

ca.uhn.hapi.fhir/hapi-fhir-base: HAPI FHIR: Denial of Service via unbounded recursion in XHTML narrative parser

A flaw was found in HAPI FHIR, a Java implementation of the HL7 FHIR standard. The XHTML narrative parser does not limit element nesting depth, which allows a deeply nested narrative to trigger unbounded recursion. A remote attacker can exploit this vulnerability by submitting FHIR resources...

CVE-2026-62296

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...