Maven/com.github.liuyueyi.media:batik-codec-fix CVE-2026-24806: medium 5.3, EPSS 0.48%
Quick-Media Batik Codec FIX package has Code Injection vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8623-9fwr-4cxv
- nvd: CVE-2026-24806
- https://github.com/liuyueyi/quick-media/pull/122
- https://github.com/liuyueyi/quick-media/commit/29c078450ad2865c7ad196c658cacfab55b207ee
- https://github.com/liuyueyi/quick-media
CVE-2026-24806 · published · modified · JSON