Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vendor

OSGeo

3 known exploited

OSGeo news

No recent coverage.

Actively exploited

All 3 →
CVE-2025-58360CVSS 9.8

OSGeo GeoServer

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

Added Dec 11, 2025Fed. due Jan 1, 2026
CVE-2024-36401CVSS 9.8

OSGeo GeoServer

OSGeo GeoServer GeoTools Eval Injection Vulnerability

Added Jul 15, 2024Fed. due Aug 5, 2024
CVE-2022-24816CVSS 10.0

OSGeo JAI-EXT

OSGeo GeoServer JAI-EXT Code Injection Vulnerability

Added Jun 26, 2024Fed. due Jul 17, 2024

Products

GeoServer · 2 KEVJAI-EXT · 1 KEV