UBUNTU-CVE-2026-44929: SSRF
Published Nov 12, 2026
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Affected Software
7 affected components
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache XML Graphics Batikto a version that resolves this vulnerability.Fixed in 1.20
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Batik versions are affected and what version fixes the issue?
Apache XML Graphics Batik through version 1.19 is affected. Upgrading to version 1.20 fixes the vulnerability.
2
What is the vulnerability type and severity?
This is a server-side request forgery (SSRF) vulnerability with a medium severity rating of 4.