{"action":"Upgrade org.verapdf:validation-model-jakarta to 1.30.2 (1.30.x) or 1.31.71 (1.31.x) or later.","affected":[{"fixed":"1.30.2","introduced":"1.25.73"},{"fixed":"1.31.71","introduced":"1.31.1"}],"component":"org.verapdf:validation-model-jakarta","cve_ids":["CVE-2026-54078"],"ecosystem":"Maven","epss":0.00555,"exploited":false,"fixed_versions":["1.30.2","1.31.71"],"ghsa_id":"GHSA-3jh7-wm29-q568","id":"tcs_01M5N88Z1CBEQMCVRXM9V3ATHH","modified_at":"2026-07-29T15:27:48.831940Z","published_at":"2026-07-29T15:11:43Z","references":["https://osv.dev/vulnerability/GHSA-3jh7-wm29-q568","https://github.com/veraPDF/veraPDF-validation/security/advisories/GHSA-3jh7-wm29-q568","https://github.com/veraPDF/veraPDF-validation"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-3jh7-wm29-q568#Maven/org.verapdf:validation-model-jakarta","url":"https://osv.dev/vulnerability/GHSA-3jh7-wm29-q568"},{"source":"nvd","source_id":"CVE-2026-54078","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54078"}],"summary":"veraPDF Validation XXE via Rich Text"}