OSGeo
3 OSGeo flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. The latest was added Dec 11, 2025.
3on CISA's list, all time
0added in 2026
0in the last 90 days
0used by ransomware
0zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| GeoServer | 2 | Dec 11, 2025 |
| JAI-EXT | 1 | Jun 26, 2024 |
Latest OSGeo flaws
- GeoServerOSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
- GeoServerOSGeo GeoServer GeoTools Eval Injection Vulnerability
- JAI-EXTOSGeo GeoServer JAI-EXT Code Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.