HighFix available
Copernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolution
Type: advisorySource: OSV
Copernik XML Factory through 0.1.1, when running on its stock JDK provider, does not block XInclude resource resolution after an application enables XInclude on a factory returned by XmlFactories.newDocumentBuilderFac…
Products: eu.copernik:copernik-xml-factoryCVEs: CVE-2026-61586