Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.geoserver/gs-wms@2.26.0
purl pkg:maven/org.geoserver/gs-wms@2.26.0
Next non-vulnerable version 2.26.3
Latest non-vulnerable version 2.27.0
Risk score 10.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-fjf5-xgmq-5525
Aliases:
CVE-2025-58360
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature ## Description An XML External Entity …
2.26.2
Vulnerable
GHSA-gr67-pwcv-76gf
Aliases:
CVE-2025-30145
GeoServer Infinite Loop Vulnerability in Jiffle process ### Summary Malicious Jiffle scripts can be executed by GeoServer, either as a …
2.26.3
Not vulnerable
This package is not known to fix any advisories.