Vulnerabilities

TI-2026-53729 CVE-2026-76904 · GHSA-mqjf-5f49-2fjh

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

MEDIUM 56

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03976 Published 2026-08-21 Fixed in 34.5, 33.6 +1 CWE-89

TI-2025-21556 CVE-2025-30220 · GHSA-jj54-8f66-c5pc

HIGH 77

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.43616 Published 2025-06-10 Fixed in 2.27.1, 2.26.3 +1 CWE-611

TI-2024-24190 CVE-2024-36404 · GHSA-w3pj-wh35-fq8w

CRITICAL 88

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.76065 Published 2024-07-02 Fixed in 29.6, 30.4 +2 CWE-95

TI-2024-24187 CVE-2024-36401 · GHSA-6jj6-gm7p-fcvv

CRITICAL 100KEV

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99813 Published 2024-07-01 Fixed in 2.23.6, 2.24.4 +2 CWE-95

TI-2023-10620 CVE-2023-25158 · GHSA-99c3-qc2q-p94m

MEDIUM 51

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2023-02-21 Fixed in 28.2, 27.4 +3 CWE-89

TI-2022-08631 CVE-2022-24818

MEDIUM 42

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0241 Published 2022-04-13 Fixed in 26.4, 25.6 +1 CWE-20