geoserver
2 known vulnerabilities in geoserver, 2 critical, 2 actively exploited, with patch priority, exploit likelihood and the news covering them.
Recently exploited
- CVE-2025-58360 CVSS 9.8 critical · actively exploited OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
- CVE-2024-36401 CVSS 9.8 critical · actively exploited OSGeo GeoServer GeoTools Eval Injection Vulnerability
Latest vulnerabilities
- CVE-2025-58360 CVSS 9.8 critical · actively exploited OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
- CVE-2024-36401 CVSS 9.8 critical · actively exploited OSGeo GeoServer GeoTools Eval Injection Vulnerability