[ Vendor · 2 CVEs ]
geoserver
CVEs affecting geoserver published in the last 30 days, plus any geoserver CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-58360 | 25 Nov 2025 | CVSS 9.8 | OSGeo GeoServer Improper Restriction of XML External Entity ReferenceGeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an… | Exploited |
| CVE-2024-36401 | 1 Jul 2024 | CVSS 9.8 | OSGeo GeoServer GeoTools Eval InjectionGeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2… | ExploitedFix |