Skip to content
Ggeotools
Products
| Product | CVEs | Exploited | Latest |
| geotools | 4 | – | Aug 21, 2026 |
Exploited and recent CVEs
-
CVE-2026-76904
Critical 9.8
GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
4.0%
-
CVE-2024-36404
Critical 9.8
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
76.1%
-
CVE-2023-25158
Critical 9.8
Unfiltered SQL Injection in Geotools
1.1%
-
CVE-2022-24818
High 8.2
Unchecked JNDI lookups in GeoTools
2.4%