Kitodo Kitodo-production vulnerabilities

• kitodo kitodo-production Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config) CVE-2026-54668 8.7 HighOctober 23, 2026