Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.xmlgraphics/batik-svgbrowser@1.11
purl pkg:maven/org.apache.xmlgraphics/batik-svgbrowser@1.11
Next non-vulnerable version 1.16
Latest non-vulnerable version 1.16
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-2bvu-58vp-c7bq
Aliases:
CVE-2020-11987
GHSA-2h63-qp69-fwvw
Server-Side Request Forgery (SSRF) Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
1.14
Affected by 5 other vulnerabilities.
VCID-ewrb-sx6p-mqbj
Aliases:
CVE-2022-41704
GHSA-r29w-r9ph-vm76
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
1.16
Affected by 0 other vulnerabilities.
VCID-hmf4-tru4-x7aj
Aliases:
CVE-2022-42890
GHSA-rwqr-m72q-v6cm
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
1.16
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:07:43.082458+00:00 GitLab Importer Affected by VCID-hmf4-tru4-x7aj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.xmlgraphics/batik-svgbrowser/CVE-2022-42890.yml 38.6.0
2026-06-06T03:07:38.237019+00:00 GitLab Importer Affected by VCID-ewrb-sx6p-mqbj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.xmlgraphics/batik-svgbrowser/CVE-2022-41704.yml 38.6.0
2026-06-04T20:45:22.459004+00:00 GitLab Importer Affected by VCID-2bvu-58vp-c7bq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.xmlgraphics/batik-svgbrowser/CVE-2020-11987.yml 38.6.0