geotools

Products

ProductCVEsExploitedLatest
geotools4–Aug 21, 2026

Exploited and recent CVEs

  • CVE-2026-76904 Critical 9.8 GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers 4.0%
  • CVE-2024-36404 Critical 9.8 GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions 76.1%
  • CVE-2023-25158 Critical 9.8 Unfiltered SQL Injection in Geotools 1.1%
  • CVE-2022-24818 High 8.2 Unchecked JNDI lookups in GeoTools 2.4%