{"action":"Upgrade org.geoserver:gs-wms to 2.25.7 (2.25.x) or 2.26.3 (2.26.x) or later.","affected":[{"fixed":"2.26.3","introduced":"2.26.0"},{"fixed":"2.25.7","introduced":"0"}],"component":"org.geoserver:gs-wms","cve_ids":["CVE-2025-30145"],"ecosystem":"Maven","epss":0.00512,"exploited":false,"fixed_versions":["2.26.3","2.25.7"],"ghsa_id":"GHSA-gr67-pwcv-76gf","id":"tcs_01M5N8YV99BSC95HZ8X485TF48","modified_at":"2025-06-10T20:27:14.973839Z","published_at":"2025-06-10T19:44:31Z","references":["https://osv.dev/vulnerability/GHSA-gr67-pwcv-76gf","https://github.com/geoserver/geoserver/security/advisories/GHSA-gr67-pwcv-76gf","https://nvd.nist.gov/vuln/detail/CVE-2025-30145","https://github.com/geosolutions-it/jai-ext/pull/307","https://github.com/geoserver/geoserver","https://osgeo-org.atlassian.net/browse/GEOS-11778"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gr67-pwcv-76gf#Maven/org.geoserver:gs-wms","url":"https://osv.dev/vulnerability/GHSA-gr67-pwcv-76gf"}],"summary":"GeoServer Infinite Loop Vulnerability in Jiffle process"}