Skip to content

OSGeo

In 1 brief, most recently 12 December 2025. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

3 OSGeo vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability added 2025-12-11
CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability added 2024-07-15
CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection Vulnerability added 2024-06-26

Coverage in DanSec Daily

Fri 12 Dec The Gogs zero-day hitting 700+ servers, the LastPass £1.2M ICO fine, Gladinet CentreStack exploitation, and WIRTE's AshTag malware campaign.