Dashboard / CVE-2026-40853

CVE-2026-40853

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-11 Modified: 2026-11-12 First seen: 2026-11-11 Status: pending_score

Description

A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFont. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Apache Software Foundation Apache XML Graphics Batik 0
Apache Software Foundation Apache XML Graphics Batik 0

References & Advisories (2)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.22%
Raw Score 0.002210
Percentile 12.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00221
2026-11-12
0.00221

Intelligence Sources

mitre ref →
nvd ref →

External Links