Skip to content
OpenAdvisories

Vendor

geotools

4 known vulnerabilities.

Products

geotools 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76904 Public exploit Scanner template

    GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

    GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: `…

    geotools geotools org.geotools.jdbc:gt-jdbc-postgis Maven
  • Critical 9.8
    CVE-2024-36404 Scanner template EPSS 76%

    GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions

    GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution (RCE) is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by us…

    geotools geotools org.geotools:gt-app-schema org.geotools.xsd:gt-xsd-core Maven
  • Critical 9.8
    CVE-2023-25158

    Unfiltered SQL Injection in Geotools

    GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when exec…

    geotools geotools org.geotools:gt-jdbc Maven