OSGeo
3 vulnerabilities in OSGeo products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2025-58360 | OSGeo | GeoServer | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | 11 Dec 2025 | 1 Jan 2026 | Unknown |
| CVE-2024-36401 | OSGeo | GeoServer | OSGeo GeoServer GeoTools Eval Injection Vulnerability | 15 Jul 2024 | 5 Aug 2024 | Unknown |
| CVE-2022-24816 | OSGeo | JAI-EXT | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | 26 Jun 2024 | 17 Jul 2024 | Unknown |