Search for packages
| purl | pkg:maven/org.geoserver.web/gs-web-app@2.26.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-7qmg-grcp-qf25
Aliases: CVE-2025-52465 |
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page ### Summary A vulnerability exists that allows … |
Not vulnerable Not vulnerable Not vulnerable |
|
GHSA-x4r9-gmw3-hxww
Aliases: CVE-2025-58175 |
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution ### Summary A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-h86g-x8mm-78m5
|
GeoServer Missing Authorization on REST API Index ### Summary It is possible to bypass the default REST API security and … |
CVE-2025-27505
|
|
CVE-2025-30145
|
GeoServer Infinite Loop Vulnerability in Jiffle process Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation … |
GHSA-gr67-pwcv-76gf
|
|
CVE-2025-30220
|
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service GeoServer Web Feature Service (WFS) web service was found … |
GHSA-jj54-8f66-c5pc
|
|
CVE-2025-27505
|
GeoServer Missing Authorization on REST API Index It is possible to bypass the default REST API security and access the … |
GHSA-h86g-x8mm-78m5
|
|
GHSA-jj54-8f66-c5pc
|
[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service ## Summary GeoServer Web Feature Service (WFS) web service … |
CVE-2025-30220
|
|
GHSA-gr67-pwcv-76gf
|
GeoServer Infinite Loop Vulnerability in Jiffle process ### Summary Malicious Jiffle scripts can be executed by GeoServer, either as a … |
CVE-2025-30145
|