Maven/org.verapdf:validation-model-jakarta CVE-2026-54078: high 8.7, EPSS 0.56%
veraPDF Validation XXE via Rich Text
Action: Upgrade org.verapdf:validation-model-jakarta to 1.30.2 (1.30.x) or 1.31.71 (1.31.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.25.73 | 1.30.2 | - |
| 1.31.1 | 1.31.71 | - |
Fixed versions
| 1.30.2 | 1.31.71 |
Sources
- osv: GHSA-3jh7-wm29-q568#Maven/org.verapdf:validation-model-jakarta
- nvd: CVE-2026-54078
- https://github.com/veraPDF/veraPDF-validation/security/advisories/GHSA-3jh7-wm29-q568
- https://github.com/veraPDF/veraPDF-validation
CVE-2026-54078 · published · modified · JSON