CVE-2026-24807
NoneCVSS
—
EPSS
0.4%
Published
Jan 27, 2026
CISA due date
—
The record
Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules). This vulnerability is associated with program files SeekableOutputStream.Java. This issue affects quick-media: before v1.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.github.liuyueyi.media:batik-codec-fix | 0 | No fix |
Related vulnerabilities
- GHSA-23f4-hfmq-94mj Quick-Media Batik Codec FIX Package has Buffer Overflow Vulnerability in PNG Codec Same vulnerability
- GHSA-8623-9fwr-4cxv Quick-Media Batik Codec FIX package has Code Injection vulnerability Also affects com.github.liuyueyi.media:batik-codec-fix
- CVE-2026-24806 Improper Control of Generation of Code ('Code Injection') vulnerability in liuyueyi… Also affects com.github.liuyueyi.media:batik-codec-fix
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102272 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102273 PyJWT is a Python implementation of JSON Web Token standards. CWE-347