UBUNTU-CVE-2026-90993: Medium severity ubuntu/batik vulnerability
Published Nov 12, 2026
·Updated
XXE vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Affected Software
7 affected components
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
ubuntu/batik*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache XML Graphics Batikto a version that resolves this vulnerability.Fixed in 1.20
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which versions need to be upgraded?
Apache XML Graphics Batik versions through 1.19 are affected. Upgrade to version 1.20, which fixes the issue.