DEBIAN-CVE-2026-111792: Debian/batik vulnerability

Q: Which versions should be remediated?

Apache XML Graphics Batik versions through 1.19 are affected. Upgrade to version 1.20, which fixes the uncontrolled recursion issue.

Q: Is a workaround available if an upgrade cannot be applied immediately?

The provided information recommends upgrading to version 1.20 and does not identify a workaround or mitigation for versions through 1.19.

Published Nov 11, 2026

Updated

Uncontrolled Recursion vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

Affected Software

3 affected componentsFixes available

debian/batik*

debian/batik<1.20-1

1.20-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/batik to a version that resolves this vulnerability.
Fixed in 1.20-1
Upgrade
Upgrade Apache XML Graphics Batik to a version that resolves this vulnerability.
Fixed in 1.20

Event History

Nov 11, 2026

CVE Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Frequently Asked Questions

Which versions should be remediated?

Apache XML Graphics Batik versions through 1.19 are affected. Upgrade to version 1.20, which fixes the uncontrolled recursion issue.

Is a workaround available if an upgrade cannot be applied immediately?

The provided information recommends upgrading to version 1.20 and does not identify a workaround or mitigation for versions through 1.19.