GeoServer org.geoserver.web:gs-web-app

• CVE-2025-58175 Medium 6.5 GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution 0.3%
• CVE-2025-52465 High 7.2 GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page 0.6%