Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.geoserver/gs-main@2.27.0
purl pkg:maven/org.geoserver/gs-main@2.27.0
Next non-vulnerable version 2.27.3
Latest non-vulnerable version 2.27.3
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2025-58175
Aliases:
GHSA-x4r9-gmw3-hxww
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow …
2.26.4
Not vulnerable
2.27.3
Not vulnerable
GHSA-x4r9-gmw3-hxww
Aliases:
CVE-2025-58175
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution ### Summary A GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` …
2.27.3
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-wf6j-gr27-g7ch
GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates ### Summary A server-side template injection (SSTI) vulnerability … CVE-2024-45747