Login Request a demo
GE
Product
geotools
by geotools · last CVE Aug 21, 2026
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 4High 1Medium 0Low 0
Severity
All severities5Critical4High1Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add geotools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-36401
In wildKEV
9.8
100%
Jul 1
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
Affected: before 29.6; 30.1 before 30.4; 31.1 before 31.2; 30.0; 30.0; 31.0; +1 more
CVE-2026-76904
9.8
4%
Aug 21
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
Affected: = 35.0; >= 34.0, < 34.5; >= 30.5, < 33.6
CVE-2023-25158
9.8
1%
Feb 21
GeoTools is an open source Java library that provides tools for geospatial data
Affected: before 24.7; 25.0 before 25.7; 26.0 before 26.7; 27.0 before 27.4; 28.0 before 28.2
CVE-2025-30220
9.1
42%
Jun 10
GeoServer is an open source server that allows users to share and edit geospatial data
Affected: before 28.6.1; 29.0 before 31.7; 32.0 before 32.3; 33.0
Showing 4