Severity: moderate Affected versions:
- Apache XML Graphics Batik 1.19 Description: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue. This issue is being tracked as BATIK-1392 References: https://xmlgraphics.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-40853 https://issues.apache.org/jira/browse/BATIK-1392
