Security
فارسی
All products

org.geoserver:gs-wms

Maven · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)CVE-2024-23642 · GHSA-FG9V-56HW-G525 org.geoserver:gs-wms Maven Medium Fix reported
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)CVE-2024-23818 · GHSA-FCPM-HCHJ-MH72 org.geoserver:gs-wms Maven Medium Fix reported
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra languageCVE-2023-35042 · GHSA-59X6-G4JR-4HXC org.geoserver:gs-wfsorg.geoserver:gs-wms Maven Critical Fix reported
GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templatesCVE-2024-45747 · GHSA-WF6J-GR27-G7CH org.geoserver.web:gs-web-apporg.geoserver:gs-main Maven High Fix reported
Remote Code Execution (RCE) vulnerability in geoserverCVE-2024-36401 · GHSA-6JJ6-GM7P-FCVV org.geoserver.web:gs-web-apporg.geoserver:gs-wfs Maven Critical Fix reported
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap featureCVE-2025-58360 · GHSA-FJF5-XGMQ-5525 org.geoserver.web:gs-web-apporg.geoserver:gs-wms Maven High Fix reported
GeoServer has a Reflected Cross-Site Scripting (XSS) vulnerability in its WMS GetFeatureInfo HTML formatCVE-2025-21621 · GHSA-W66H-J855-QR72 org.geoserver.web:gs-web-apporg.geoserver:gs-wms Maven Medium Fix reported
GeoServer Infinite Loop Vulnerability in Jiffle processCVE-2025-30145 · GHSA-GR67-PWCV-76GF org.geoserver.extension:gs-wps-coreorg.geoserver.web:gs-web-app Maven High Fix reported
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRFCVE-2023-41339 · GHSA-CQPC-X2C6-2GMF org.geoserver.web:gs-web-apporg.geoserver:gs-wms Maven Medium Fix reported