Skip to content

Geysermc Geyser vulnerabilities

geysermc geyserGeyser: Server-Side Request Forgery (SSRF) via Player Head Texture URLCVE-2026-42188Fix available2.4 LowMay 5, 2026
geysermc geyserUser impersonation due to incorrect handling of the login JWTCVE-2021-39177Fix available7.4 HighAugust 30, 2021