CVE-2026-22186
1 advisory.
Maven/ome:pom-bio-formats CVE-2026-22186: high 7.1
Bio-Formats has an XML External Entity (XXE) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 8.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fcqj-76g3-q7qm
- https://github.com/ome/bioformats/security/advisories/GHSA-x9vc-qh97-8gjp
- https://nvd.nist.gov/vuln/detail/CVE-2026-22186
- https://docs.openmicroscopy.org/bio-formats
- https://github.com/ome/bioformats
- https://seclists.org/fulldisclosure/2026/Jan/6
- https://www.vulncheck.com/advisories/bio-formats-xxe-in-leica-xlef-metadata-parser
CVE-2026-22186 · published · modified · JSON