netVigilance Vulnerability intelligence since 2004

OSGeo

3 OSGeo vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for OSGeo
Vulnerability Status
overdue 252d2026-01-01 CVE-2025-58360 OSGeo / GeoServer OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability 2025-12-11 9.8 past due
overdue 766d2024-08-05 CVE-2024-36401 OSGeo / GeoServer OSGeo GeoServer GeoTools Eval Injection Vulnerability 2024-07-15 9.8 past due
overdue 785d2024-07-17 CVE-2022-24816 OSGeo / JAI-EXT OSGeo GeoServer JAI-EXT Code Injection Vulnerability 2024-06-26 10.0 past due
3 records Open in catalog with filters →