Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

62 records

Vendor: OSGeo Clear all filters
TI-2026-36264 CVE-2026-49014 · GHSA-wphc-7cm7-8mf7

Stack-based buffer overflow in GDAL

Priority HIGH 69

In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00102 Published 2026-05-27 Fixed in 3.13.1 CWE-121
TI-2026-07126 CVE-2026-8088 · GHSA-j3f5-rw74-g4rv

OSGeo gdal GDapi.c GDfieldinfo out-of-bounds

Priority MEDIUM 55

A weakness has been identified in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-07 Fixed in 3.13.0RC1, 3.13.0 CWE-119
TI-2026-07125 CVE-2026-8087 · GHSA-h9rh-5ffh-h669

OSGeo gdal GDapi.c GDnentries heap-based overflow

Priority MEDIUM 55

A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00223 Published 2026-05-07 Fixed in 3.13.0RC1, 3.13.0 CWE-119
TI-2026-07124 CVE-2026-8086 · GHSA-72pg-5w29-wjx6

OSGeo gdal SWapi.c SWnentries heap-based overflow

Priority MEDIUM 55

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00237 Published 2026-05-07 Fixed in 3.12.4RC1 CWE-119
TI-2026-04133 CVE-2026-4738 · GHSA-hp6p-5qh5-w9fj

Memory corruption in OSGeo gdal

Priority MEDIUM 42

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules).

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00263 Published 2026-03-24 Fixed CWE-119
TI-2022-26353 CVE-2022-50899 · GHSA-q595-r7rh-mc9h

Geonetwork 4.2.0 - XML External Entity (XXE)

Priority MEDIUM 44

Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00551 Published 2026-01-13 No fix listed CWE-611
TI-2025-20337 CVE-2025-27505 · GHSA-h86g-x8mm-78m5

GeoServer Missing Authorization on REST API Index

Priority LOW 32

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01165 Published 2025-06-10 Fixed in 2.26.3, 2.25.6 CWE-862
Load more