osgeo
Safeguard articles tagged "osgeo" — guides, analysis, and best practices for software supply chain and application security.
4 articles
CVE-2022-24816: OSGeo GeoServer JAI-EXT Code Injection Vulnerability
CVE-2022-24816 affects OSGeo JAI-EXT and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-06-26.
CVE-2024-36401: OSGeo GeoServer GeoTools Eval Injection Vulnerability
CVE-2024-36401 affects OSGeo GeoServer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-07-15.
CVE-2025-58360: OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
CVE-2025-58360 affects OSGeo GeoServer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-12-11.
GeoServer's WMS Endpoint Adds Another XXE to Its Exploitation History
CVE-2025-58360 lets attackers define external XML entities through GeoServer's GetMap operation — the latest confirmed-exploited bug in a geospatial server long favored by less security-mature operators.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.