KI
Product
kitodo-production
by kitodo · last CVE Oct 23, 2026
1
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add kitodo-production to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54668
New
8.7
0%
Oct 23
Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)
Affected: < 3.9.2
Showing 1