org.verapdf:validation-model-jakarta vulnerabilities
CVEs whose affected-version data names the org.verapdf:validation-model-jakarta package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-54079HighveraPDF Validation XXE via XFA
veraPDF Validation XXE via XFA
▾ Twilightverapdf · org.verapdf:validation-modelEPSS 0.32%via GHSA
CVE-2026-54078HighveraPDF Validation XXE via Rich Text
veraPDF Validation XXE via Rich Text
▾ Twilightverapdf · org.verapdf:validation-modelEPSS 0.32%via GHSA
CVE-2026-54082Medium· 6.5veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
▾ Sunlitverapdf · org.verapdf:validation-modelEPSS 0.23%via GHSA