{"action":"Upgrade eu.copernik:copernik-xml-factory to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"eu.copernik:copernik-xml-factory","cve_ids":["CVE-2026-61586"],"ecosystem":"Maven","epss":0.00357,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-xm28-xvqc-gxxg","id":"tcs_01M5N9JHXE9CC588AA36ZEAEN2","modified_at":"2026-10-02T18:45:04.985000035Z","published_at":"2026-10-02T18:27:17Z","references":["https://osv.dev/vulnerability/GHSA-xm28-xvqc-gxxg","https://github.com/copernik-eu/copernik-xml-factory/security/advisories/GHSA-xm28-xvqc-gxxg","https://github.com/copernik-eu/copernik-xml-factory/commit/2fa042c44931b0a4ddd585d62b97a8a987efd6c6","https://github.com/copernik-eu/copernik-xml-factory/commit/e5febc6039ed4b0088245acb80ed7d6d6a7f5537","https://github.com/copernik-eu/copernik-xml-factory","https://github.com/copernik-eu/copernik-xml-factory/releases/tag/v0.1.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-xm28-xvqc-gxxg","url":"https://osv.dev/vulnerability/GHSA-xm28-xvqc-gxxg"}],"summary":"Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution"}