Apache Software Foundation Apache SIS

• CVE-2026-110748 Medium 5.5 Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files 0.1%
• CVE-2026-110733 Medium 5.4 Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store 0.3%
• CVE-2025-68280 Medium 6.5 Apache SIS: XML External Entity (XXE) vulnerability 0.7%