saxy vulnerabilities (Hex)

3 vulnerabilities.

• saxy Hex XML injection in Saxy via unescaped CDATA section terminator CVE-2026-66294 Fix available 2.1 LowNovember 6, 2026
• saxy Hex Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection CVE-2026-66295 Fix available 2.1 LowNovember 6, 2026
• saxy Hex XML comment injection in Saxy encoder via unescaped double hyphen CVE-2026-66293 Fix available 2.1 LowNovember 6, 2026