{"action":"Upgrade org.apache.xmlgraphics:batik-bridge to 1.16 or later.","affected":[{"fixed":"1.16","introduced":"0"}],"component":"org.apache.xmlgraphics:batik-bridge","cve_ids":["CVE-2022-42890"],"ecosystem":"Maven","epss":0.03355,"exploited":false,"fixed_versions":["1.16"],"ghsa_id":"GHSA-rwqr-m72q-v6cm","id":"tcs_01M5N9CRV13M34D8TEMTECG07R","modified_at":"2025-09-24T21:26:51.423780Z","published_at":"2022-10-25T19:00:29Z","references":["https://osv.dev/vulnerability/GHSA-rwqr-m72q-v6cm","https://nvd.nist.gov/vuln/detail/CVE-2022-42890","https://github.com/apache/xmlgraphics-batik/commit/401aa8595f52d085d40ff5b6b4ac0dd372423082","https://github.com/apache/xmlgraphics-batik/commit/52f7a1ad6e3110ec295a35ffc94410eef085707a","https://github.com/apache/xmlgraphics-batik/commit/eada57c716a2757579d53017f8b2aeadaad20edd","https://issues.apache.org/jira/browse/BATIK-1345","https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly","https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html","https://security.gentoo.org/glsa/202401-11","https://www.debian.org/security/2022/dsa-5264","https://xmlgraphics.apache.org/security.html","http://svn.apache.org/repos/asf/xmlgraphics/batik/trunk","http://www.openwall.com/lists/oss-security/2022/10/25/3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rwqr-m72q-v6cm#Maven/org.apache.xmlgraphics:batik-bridge","url":"https://osv.dev/vulnerability/GHSA-rwqr-m72q-v6cm"}],"summary":"Untrusted code execution in Apache XML Graphics Batik"}