Skip to content
Geotools vulnerabilities
Newest
-
geotools
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
CVE-2026-76904
Public exploitFix available
9.8 Critical
-
geoserver, geotools, osgeo geonetwork +2 more
GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling
CVE-2025-30220
Fix available
EPSS 43.6%
9.9 Critical
-
geotools
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
CVE-2024-36404
Fix available
EPSS 76.1%
9.8 Critical
-
geoserver, geotools +1 more
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
CVE-2024-36401
In KEVPublic exploitFix available
EPSS 99.8%
9.8 Critical
-
geotools
Unfiltered SQL Injection in Geotools
CVE-2023-25158
Fix available
9.8 Critical
-
geotools
Unchecked JNDI lookups in GeoTools
CVE-2022-24818
Public exploit
8.2 High