XXE in Eclipse Foundation Rdf4j
CVE-2026-15803
In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and exter…
Vulnerability class: XXE (XML External Entity)
Affected products
- Eclipse Foundation Rdf4j — versions 0