OSGeo
3 CVEs in CISA KEV
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-36401 |
GeoServer | — | 0.9981 | 2024-07-15 | 2024-08-05 | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dy | |
CVE-2025-58360 |
GeoServer | — | 0.6117 | 2025-12-11 | 2026-01-01 | OSGeo GeoServer contains an improper restriction of XML external entity referenc | |
CVE-2022-24816 |
JAI-EXT | — | — | 2024-06-26 | 2024-07-17 | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when progr |