https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T14:15:29.027304+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-0250 CVE-2015-0250 2026-09-30T14:15:29.215090+00:00

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

 https://vulnerability.circl.lu/vuln/usn-2548-1 USN-2548-1 — batik vulnerability 2026-09-30T14:15:29.215176+00:00

Affected: Ubuntu:14.04:LTS: batik

Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause resource consumption.