{"api_version":"v1","generated_at":"2026-10-10T02:35:00+00:00","product":{"cve_count":2,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-geoserver-org-geoserver-web-gs-web-app-209ae75760f8","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"org.geoserver.web:gs-web-app","next_cursor":null,"observations":[{"affected":"org.geoserver.web:gs-web-app: < 2.26.4, >= 2.27.0, < 2.27.3; org.geoserver:gs-main: < 2.26.4, >= 2.27.0, < 2.27.3","affected_versions_present":true,"cve_id":"CVE-2025-58175","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58175","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-18T15:26:07.311Z","patch_url":"https://github.com/geoserver/geoserver/pull/8622","primary_source":"","published":"2026-06-18T14:31:19.757Z"},{"affected":"org.geoserver.web:gs-web-app: < 2.26.4, >= 2.27.0, < 2.27.3; org.geoserver.web:gs-web-sec-core: < 2.26.4, >= 2.27.0, < 2.27.3","affected_versions_present":true,"cve_id":"CVE-2025-52465","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-52465","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-24T03:56:00.821Z","patch_url":"https://github.com/geoserver/geoserver/pull/8584","primary_source":"","published":"2026-06-18T14:28:41.270Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"geoserver"}}