Search for packages
| purl | pkg:maven/org.geoserver.web/gs-web-app@2.26.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-fjf5-xgmq-5525
Aliases: CVE-2025-58360 |
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature ## Description An XML External Entity … |
Vulnerable |
|
GHSA-jm79-7xhw-6f6f
Aliases: CVE-2024-38524 |
GWC Home Page communicate version and revision information ### Summary The GeoWebCache home page includes version and revision information about … |
Vulnerable |
|
GHSA-h86g-x8mm-78m5
Aliases: CVE-2025-27505 |
GeoServer Missing Authorization on REST API Index ### Summary It is possible to bypass the default REST API security and … |
Vulnerable |
|
GHSA-jj54-8f66-c5pc
Aliases: CVE-2025-30220 |
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service ## Summary GeoServer Web Feature Service (WFS) web service … |
Vulnerable |
|
GHSA-gr67-pwcv-76gf
Aliases: CVE-2025-30145 |
GeoServer Infinite Loop Vulnerability in Jiffle process ### Summary Malicious Jiffle scripts can be executed by GeoServer, either as a … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-r4hf-r8gj-jgw2
|
Coverage REST API Server Side Request Forgery ### Summary The Coverage rest api `/workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{format}` allow to upload file with a … |
CVE-2024-40625
|