{"action":"Upgrade org.apache.xmlgraphics:batik to 1.16 or later.","affected":[{"fixed":"1.16","introduced":"0"}],"component":"org.apache.xmlgraphics:batik","cve_ids":["CVE-2022-41704"],"ecosystem":"Maven","epss":0.03099,"exploited":false,"fixed_versions":["1.16"],"ghsa_id":"GHSA-r29w-r9ph-vm76","id":"tcs_01M5N9ANWJWJP8A0M5YWXWW8NC","modified_at":"2024-02-16T08:05:00.323915Z","published_at":"2022-10-25T19:00:29Z","references":["https://osv.dev/vulnerability/GHSA-r29w-r9ph-vm76","https://nvd.nist.gov/vuln/detail/CVE-2022-41704","https://github.com/apache/xmlgraphics-batik/commit/905f368b50c2567cf2c4869a0ab596a7b1b5125c","https://issues.apache.org/jira/browse/BATIK-1338","https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf","https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html","https://security.gentoo.org/glsa/202401-11","https://www.debian.org/security/2022/dsa-5264","https://xmlgraphics.apache.org/security.html","http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk","http://www.openwall.com/lists/oss-security/2022/10/25/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r29w-r9ph-vm76","url":"https://osv.dev/vulnerability/GHSA-r29w-r9ph-vm76"}],"summary":"Apache XML Graphics Batik vulnerable to code execution via SVG."}