XXE in Verapdf Verapdf-validation
CVE-2026-54078
veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/java/org/verapdf/gf/m…
Vulnerability class: XXE (XML External Entity)
Affected products
- Verapdf Verapdf-validation — versions >= 1.25.73, < 1.30.2, >= 1.31.1, < 1.31.71
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)