Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Dec 11, 2025

1 new incident, 0 with updates.

Started

  • ClosedPatched

    OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability

    OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request. Added to CISA KEV on 2025-12-11.

    OSGeo GeoServerClosed Dec 11, 2025

Sponsored

Buy sponsor slot · $149/mo