Security Digest
OSGeo: known exploited vulnerabilities
3 OSGeo CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-12-11 | CVE-2025-58360 | OSGeo GeoServer OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | 2026-01-01 |
| 2024-07-15 | CVE-2024-36401 | OSGeo GeoServer OSGeo GeoServer GeoTools Eval Injection Vulnerability | 2024-08-05 |
| 2024-06-26 | CVE-2022-24816 | OSGeo JAI-EXT OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 2024-07-17 |