OSGeo: exploited vulnerabilities
- 3exploited vulnerabilities
- 0used by ransomware
- Dec 11, 2025latest one added
- GeoServer 2
- JAI-EXT 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Dec 11, 2025 | Improper Restriction of XML External Entity Reference | GeoServer | High 8.2 | 61% |
| Jul 15, 2024 | GeoTools Eval Injection | GeoServer | Critical 9.8 | 99.8% |
| Jun 26, 2024 | GeoServer JAI-EXT Code Injection | JAI-EXT | Critical 10.0 | 99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.