tocsin

CVE-2025-30145

3 advisories.

Maven/org.geoserver.web:gs-web-app CVE-2025-30145: high 7.5

GeoServer Infinite Loop Vulnerability in Jiffle process

Action: Upgrade org.geoserver.web:gs-web-app to 2.25.7 (2.25.x) or 2.26.3 (2.26.x) or later.

Affected

introducedfixedlast affected
2.26.02.26.3-
02.25.7-

Fixed versions

2.26.32.25.7

Sources

CVE-2025-30145 · published · modified · JSON

Maven/org.geoserver:gs-wms CVE-2025-30145: high 7.5

GeoServer Infinite Loop Vulnerability in Jiffle process

Action: Upgrade org.geoserver:gs-wms to 2.25.7 (2.25.x) or 2.26.3 (2.26.x) or later.

Affected

introducedfixedlast affected
2.26.02.26.3-
02.25.7-

Fixed versions

2.26.32.25.7

Sources

CVE-2025-30145 · published · modified · JSON

Maven/org.geoserver.extension:gs-wps-core CVE-2025-30145: high 7.5

GeoServer Infinite Loop Vulnerability in Jiffle process

Action: Upgrade org.geoserver.extension:gs-wps-core to 2.25.7 (2.25.x) or 2.26.3 (2.26.x) or later.

Affected

introducedfixedlast affected
2.26.02.26.3-
02.25.7-

Fixed versions

2.26.32.25.7

Sources

CVE-2025-30145 · published · modified · JSON