{"api_version":"v1","generated_at":"2026-10-09T17:50:00+00:00","product":{"cve_count":25,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-geoserver-geoserver-611a749a5464","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/geoserver","name":"geoserver","next_cursor":null,"observations":[{"affected":"< 2.25.0","affected_versions_present":true,"cve_id":"CVE-2025-21621","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-21621","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-26T16:03:05.272Z","patch_url":"https://github.com/geoserver/geoserver/commit/dc9ff1c726dd73c884437a123b4ad72b19383c7d","primary_source":"","published":"2025-11-25T21:52:11.598Z"},{"affected":">= 2.27.0, < 2.27.1; >= 2.26.0, < 2.26.3; < 2.25.7","affected_versions_present":true,"cve_id":"CVE-2025-30220","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30220","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T17:13:09.180Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-jj54-8f66-c5pc","primary_source":"","published":"2025-06-10T15:16:39.339Z"},{"affected":">= 2.26.0, < 2.26.3; < 2.25.7","affected_versions_present":true,"cve_id":"CVE-2025-30145","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-30145","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T15:16:31.100Z","patch_url":"https://github.com/geosolutions-it/jai-ext/pull/307","primary_source":"","published":"2025-06-10T14:58:48.408Z"},{"affected":">= 2.26.0, < 2.26.3; < 2.25.6","affected_versions_present":true,"cve_id":"CVE-2025-27505","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-27505","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T15:01:45.132Z","patch_url":"https://github.com/geoserver/geoserver/pull/8170","primary_source":"","published":"2025-06-10T14:52:19.499Z"},{"affected":"< 2.26.0","affected_versions_present":true,"cve_id":"CVE-2024-40625","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-40625","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T14:55:09.694Z","patch_url":"https://osgeo-org.atlassian.net/browse/GEOS-11468","primary_source":"","published":"2025-06-10T14:49:05.368Z"},{"affected":">= 2.26.0, < 2.26.2; < 2.25.6","affected_versions_present":true,"cve_id":"CVE-2024-38524","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38524","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-10T14:56:58.139Z","patch_url":"https://github.com/GeoWebCache/geowebcache/pull/1345","primary_source":"","published":"2025-06-10T14:43:04.590Z"},{"affected":"< 2.25.0","affected_versions_present":true,"cve_id":"CVE-2024-34711","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34711","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-10T15:08:27.117Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-mc43-4fqr-c965","primary_source":"","published":"2025-06-10T14:33:18.872Z"},{"affected":">= 2.0.0, < 2.24.4; >= 2.25.0, < 2.25.2","affected_versions_present":true,"cve_id":"CVE-2024-29198","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-29198","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-17T19:12:00.664Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-5gw5-jccf-6hxw","primary_source":"","published":"2025-06-10T14:27:39.485Z"},{"affected":">= 2.0.0, < 2.26.0","affected_versions_present":true,"cve_id":"CVE-2024-35230","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-35230","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-17T14:40:36.212Z","patch_url":"https://github.com/geoserver/geoserver/commit/74fdab745a5deff20ac99abca24d8695fe1a52f8","primary_source":"","published":"2024-12-16T22:18:19.896Z"},{"affected":">= 2.10.0, < 2.24.4; >= 2.25.0, < 2.25.1","affected_versions_present":true,"cve_id":"CVE-2024-34696","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34696","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T02:59:21.661Z","patch_url":"","primary_source":"","published":"2024-07-01T14:36:05.084Z"},{"affected":"< 2.23.5; >= 2.24.0, < 2.24.3","affected_versions_present":true,"cve_id":"CVE-2024-24749","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-24749","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-04T18:29:12.335Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-jhqx-5v5g-mpf3","primary_source":"","published":"2024-07-01T14:07:33.314Z"},{"affected":"< 2.23.4; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2024-23821","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23821","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-10T20:17:43.665Z","patch_url":"","primary_source":"","published":"2024-03-20T18:03:25.433Z"},{"affected":"< 2.23.4; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2024-23819","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23819","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:13:08.246Z","patch_url":"https://github.com/geoserver/geoserver/commit/6f04adbdc6c289f5cb815b1462a6bd790e3fb6ef","primary_source":"","published":"2024-03-20T18:00:46.048Z"},{"affected":"< 2.23.3; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2024-23818","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23818","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:13:07.982Z","patch_url":"https://github.com/geoserver/geoserver/commit/4557a832eed19ec18b9753cb97e8aa85269741d2","primary_source":"","published":"2024-03-20T17:57:38.893Z"},{"affected":"< 2.23.2; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2024-23643","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23643","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:06:25.325Z","patch_url":"https://github.com/GeoWebCache/geowebcache/commit/9d010e09c784690ada8af43f594461a2553a62f0","primary_source":"","published":"2024-03-20T17:50:48.344Z"},{"affected":"< 2.23.4; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2024-23642","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23642","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:06:25.296Z","patch_url":"https://github.com/geoserver/geoserver/commit/1b1835afbb9c282d1840786259aeda81c1d22b00","primary_source":"","published":"2024-03-20T17:44:49.153Z"},{"affected":"< 2.23.3","affected_versions_present":true,"cve_id":"CVE-2024-23640","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23640","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-01T23:06:25.345Z","patch_url":"","primary_source":"","published":"2024-03-20T15:26:01.700Z"},{"affected":"< 2.23.5; >= 2.24.0, < 2.24.2","affected_versions_present":true,"cve_id":"CVE-2024-23634","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-23634","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:06:25.331Z","patch_url":"https://github.com/geoserver/geoserver/commit/5d6af2f8ba9ad7dffae59575504a867159698772","primary_source":"","published":"2024-03-20T15:22:41.431Z"},{"affected":"< 2.23.3","affected_versions_present":true,"cve_id":"CVE-2023-51445","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51445","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-21T23:01:43.594Z","patch_url":"https://github.com/geoserver/geoserver/commit/7db985738ff2422019ccac974cf547bae5770cad","primary_source":"","published":"2024-03-20T15:14:49.682Z"},{"affected":"< 2.23.4; = 2.24.0","affected_versions_present":true,"cve_id":"CVE-2023-51444","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51444","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-21T14:35:24.029Z","patch_url":"https://github.com/geoserver/geoserver/commit/ca683170c669718cb6ad4c79e01b0451065e13b8","primary_source":"","published":"2024-03-20T15:07:29.869Z"},{"affected":"<= 2.23.4","affected_versions_present":true,"cve_id":"CVE-2023-41877","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-41877","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T19:09:49.319Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-8g7v-vjrc-x4g5","primary_source":"","published":"2024-03-20T14:27:34.308Z"},{"affected":"< 2.22.5; >= 2.23.0, < 2.23.2","affected_versions_present":true,"cve_id":"CVE-2023-43795","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-43795","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T14:15:26.074Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-5pr3-m5hm-9956","primary_source":"","published":"2023-10-24T22:14:30.956Z"},{"affected":"< 2.22.5; >= 2.23.0, < 2.23.2","affected_versions_present":true,"cve_id":"CVE-2023-41339","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-41339","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-11T18:00:37.015Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-cqpc-x2c6-2gmf","primary_source":"","published":"2023-10-24T20:15:17.428Z"},{"affected":">= 2.22.0, < 2.22.2; < 2.21.4","affected_versions_present":true,"cve_id":"CVE-2023-25157","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-25157","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:07:17.645Z","patch_url":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","primary_source":"","published":"2023-02-21T21:00:13.392Z"},{"affected":">= 2.20.0, < 2.20.4; < 2.19.6","affected_versions_present":true,"cve_id":"CVE-2022-24847","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24847","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T18:39:57.625Z","patch_url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-4pm3-f52j-8ggh","primary_source":"","published":"2022-04-13T21:20:12.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"geoserver"}}