GHSA-23f4-hfmq-94mjMedium

Quick-Media Batik Codec FIX Package has Vulnerability in PNG Codec

Published
January 27, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-24807 →

📋 Description

Improper Verification of Cryptographic Signature vulnerability in liuyueyi quick-media (plugins/svg-plugin/batik-codec-fix/src/main/java/org/apache/batik/ext/awt/image/codec/util modules). This vulnerability is associated with program files SeekableOutputStream.Java.

This issue affects all versions of quick-media. A patch is available: 3970e96

🎯 Affected products1

  • maven/com.github.liuyueyi.media:batik-codec-fix:<= 3.0.0

🔗 References (6)