All 4 CVE vulnerabilities found in geotools, with AI-generated Chinese analysis, references, and POCs.
Vendor: geotools
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76904 | GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers CWE-89 | 9.8 | Critical | 2026-08-21 |
| CVE-2024-36404 | GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions CWE-95 | 9.8 | Critical | 2024-07-02 |
| CVE-2023-25158 | Unfiltered SQL Injection in Geotools CWE-89 | 9.8 | Critical | 2023-02-21 |
| CVE-2022-24818 | Unchecked JNDI lookups in GeoTools CWE-20 | 8.2 | High | 2022-04-13 |
All 4 known CVE vulnerabilities affecting geotools with full Chinese analysis, references, and POCs where available.