Linux Distros Unpatched Vulnerability : CVE-2026-49236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This...

SUSE CVE-2026-49236

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

DEBIAN-CVE-2026-49236

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-49236

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-49236 Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checks

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

EUVD-2026-123477

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-49236

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-49236

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache XML Graphics Batik versions prior to 1.20 . The root cause is that the SVG color-profile xml:base attribute can bypass Batik's external resource same-origin checks . To remediate this issue, users are recommended to upgrade to ve...

CVE-2026-49236: Apache Software Foundation Apache XML Graphics Batik: Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik

Server-Side Request Forgery SSRF vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

PT-2026-145229

Name of the Vulnerable Software and Affected Versions Apache XML Graphics Batik versions prior to 1.20 Description Server-Side Request Forgery SSRF occurs when a crafted SVG file uses a malicious xml:base URL to bypass same-origin checks for external resources. This allows the application to make...

WS-2018-0015

On Firefox there is a XSS vulnerability in case a malicious attacker can write into the xml:base attribute on an SVG anchor...

Cross-site Scripting (XSS)

angular is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization on xml:base attributes, which allows the Firefox browser to render malicious scripts...