eu.copernik vulnerabilities

Products

• eu.copernik/copernik-xml-factory 1

Latest eu.copernik CVEs

Newest publication first

1. CVE-2026-61586 Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider)

   Published 2026-10-30

   High·CVSS 8.2 EPSS 0.36%

   Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory does not block XInclude resource resolution on the stock JDK provider after an application enables XInclude on a factory returned by XmlFactories.newDocumentBuilde...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.