GeyserMC

Products

ProductCVEsExploitedLatest
Geyser2–May 11, 2026

Exploited and recent CVEs

  • CVE-2026-42188 Low 2.4 Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL 0.2%
  • CVE-2021-39177 High 7.4 User impersonation due to incorrect handling of the login JWT 1.4%