GeyserMC Geyser

• CVE-2026-42188 Low 2.4 Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL 0.2%
• CVE-2021-39177 High 7.4 User impersonation due to incorrect handling of the login JWT 1.4%