Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.geoserver/gs-wms@2.26.2
purl pkg:maven/org.geoserver/gs-wms@2.26.2
Next non-vulnerable version 2.26.3
Latest non-vulnerable version 2.27.0
Risk score 3.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-gr67-pwcv-76gf
Aliases:
CVE-2025-30145
GeoServer Infinite Loop Vulnerability in Jiffle process ### Summary Malicious Jiffle scripts can be executed by GeoServer, either as a …
2.26.3
Not vulnerable
2.26.3
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-fjf5-xgmq-5525
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature ## Description An XML External Entity … CVE-2025-58360
CVE-2025-58360
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature An XML External Entity (XXE) vulnerability … GHSA-fjf5-xgmq-5525