| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.xmlgraphics:batik | < 1.16 | 1.16 |
| org.apache.xmlgraphics:batik-bridge | < 1.16 | 1.16 |
| batik | ≥ 1.0, < 1.16 | 1.16 |
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free