XXE in Verapdf Verapdf-validation
CVE-2026-54079
veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/jav…
Vulnerability class: XXE (XML External Entity)
Affected products
- Verapdf Verapdf-validation — versions >= 1.17.35, < 1.30.2, >= 1.31.1, < 1.31.71
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)