Login Request a demo
OR
Product
org.geoserver.web:gs-web-app
by geoserver · last CVE Jun 18, 2026
2
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities2Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add org.geoserver.web:gs-web-app to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58175
8.2
0%
Jun 18
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution
Affected: < 2.26.4; >= 2.27.0, < 2.27.3
CVE-2025-52465
7.2
1%
Jun 18
GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page
Affected: < 2.26.4; >= 2.27.0, < 2.27.3
Showing 2