[ Vendor · 3 CVEs ]
OSGeo
CVEs affecting OSGeo published in the last 30 days, plus any OSGeo CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-58360 | 25 Nov 2025 | CVSS 9.8 | OSGeo GeoServer Improper Restriction of XML External Entity ReferenceGeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an… | Exploited |
| CVE-2024-36401 | 1 Jul 2024 | CVSS 9.8 | OSGeo GeoServer GeoTools Eval InjectionGeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2… | ExploitedFix |
| CVE-2022-24816 | 13 Apr 2022 | CVSS 10.0 | OSGeo GeoServer JAI-EXT Code InjectionJAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via… | ExploitedFix |