ZeusQA
Start free

Known exploited vulnerabilities

OSGeo vulnerabilities attackers have used

Every OSGeo vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 OSGeo vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-58360, added Dec 11, 2025. GeoServer has the most entries (2).

In KEV, all time
3
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

GeoServer (2), JAI-EXT (1).

Every OSGeo entry in CISA KEV

  1. CVE-2025-58360

    Added · due

    OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

    OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to…

  2. CVE-2024-36401

    Added · due

    OSGeo GeoServer GeoTools Eval Injection Vulnerability

    OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote…

  3. CVE-2022-24816

    Added · due

    OSGeo GeoServer JAI-EXT Code Injection Vulnerability

    OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works