Read the docs

OSGeo

Records62All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

OSGeo records in CISA KEV
TI-2025-36149 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 99KEV 2025-12-11TI-2024-24187 OSGeo GeoServer GeoTools Eval Injection Vulnerability Priority CRITICAL 100KEV 2024-07-15TI-2022-08629 OSGeo GeoServer JAI-EXT Code Injection Vulnerability Priority CRITICAL 100KEV 2024-06-26

Components

Products in the NVD configurations · select one to filter the records
Mapserver 22 records HIGH Geoserver 16 records CRITICAL Gdal 12 records HIGH Geonetwork 4 records HIGH Owslib 2 records MEDIUM Pywps 1 record LOW Shapelib 1 record MEDIUM

Records

1 record in Shapelib · all components

TI-2022-00613 CVE-2022-0699 · GHSA-j5p4-42cc-2j44

Use after free in shapelib

Priority MEDIUM 52

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0166 Published 2022-10-17 No fix listed CWE-416
Open these records in search →