{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-23T03:54:42.456Z",
  "tag": {
    "id": "geoserver",
    "label": "GeoServer",
    "isStack": false,
    "url": "https://pwn.watch/t/geoserver",
    "feed": "https://pwn.watch/t/geoserver/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "osgeo-geoserver-cve-2025-58360",
      "title": "OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability",
      "url": "https://pwn.watch/i/osgeo-geoserver-cve-2025-58360",
      "json": "https://pwn.watch/i/osgeo-geoserver-cve-2025-58360.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "OSGeo GeoServer",
      "tags": [
        "java",
        "geoserver",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-58360"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-12-11",
      "closedAt": "2025-12-11",
      "updatedAt": "2025-12-11",
      "summary": "OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request. Added to CISA KEV on 2025-12-11.",
      "xPost": null
    },
    {
      "slug": "osgeo-geoserver-cve-2024-36401",
      "title": "OSGeo GeoServer GeoTools Eval Injection",
      "url": "https://pwn.watch/i/osgeo-geoserver-cve-2024-36401",
      "json": "https://pwn.watch/i/osgeo-geoserver-cve-2024-36401.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "OSGeo GeoServer",
      "tags": [
        "java",
        "osgeo",
        "geoserver",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-36401"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-07-01",
      "closedAt": "2024-07-15",
      "updatedAt": "2024-07-15",
      "summary": "OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input. Added to the CISA KEV catalog on 2024-07-15.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "osgeo-geoserver-cve-2025-58360",
      "incidentTitle": "OSGeo GeoServer: GeoServer Improper Restriction of XML External Entity Reference Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-11",
      "title": "CISA added CVE-2025-58360 to the KEV catalog (due 2026-01-01).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/osgeo-geoserver-cve-2025-58360"
    },
    {
      "incident": "osgeo-geoserver-cve-2024-36401",
      "incidentTitle": "OSGeo GeoServer GeoTools Eval Injection",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-15",
      "title": "CISA added CVE-2024-36401 to the KEV catalog (federal deadline 2024-08-05)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/osgeo-geoserver-cve-2024-36401"
    },
    {
      "incident": "osgeo-geoserver-cve-2024-36401",
      "incidentTitle": "OSGeo GeoServer GeoTools Eval Injection",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-01",
      "title": "CVE-2024-36401 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-36401",
      "url": "https://pwn.watch/i/osgeo-geoserver-cve-2024-36401"
    }
  ]
}