Search for packages
| purl | pkg:maven/org.apache.xmlgraphics/batik-svgrasterizer@1.13 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zxeg-w6n7-cbe3
Aliases: CVE-2022-44729 GHSA-gq5f-xv48-2365 |
Apache XML Graphics Batik Server-Side Request Forgery vulnerability Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-neqx-5sez-gyeg | Server-Side Request Forgery (SSRF) Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. |
CVE-2019-17566
GHSA-cmx4-p4v5-hmr5 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-06T04:03:16.225246+00:00 | GitLab Importer | Affected by | VCID-zxeg-w6n7-cbe3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.xmlgraphics/batik-svgrasterizer/CVE-2022-44729.yml | 38.6.0 |
| 2026-06-02T04:41:13.696819+00:00 | GitLab Importer | Fixing | VCID-neqx-5sez-gyeg | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.xmlgraphics/batik-svgrasterizer/CVE-2019-17566.yml | 38.6.0 |