osgeo has 3 CVEs on record. The busiest recent month was June 2026 with 3. The median CVSS is 7.2 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 0 prev 3
Worst active — by depth score
CVE-2025-52465High· 7.2GeoServer is an open source server that allows users to share and edit geospatial data40CVE-2025-27511High· 7.2GeoServer is an open source server that allows users to share and edit geospatial data40CVE-2025-58175Medium· 6.5GeoServer is an open source server that allows users to share and edit geospatial data36
osgeo vulnerabilities
CVEs affecting osgeo, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-27511High· 7.2GeoServer is an open source server that allows users to share and edit geospatial data
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url l…
CVE-2025-52465High· 7.2GeoServer is an open source server that allows users to share and edit geospatial data
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to …
CVE-2025-58175Medium· 6.5GeoServer is an open source server that allows users to share and edit geospatial data
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow attacker to perform unauthenticated Server-Side Re…