Skip to content
OpenAdvisories

Vendor

GeyserMC

2 known vulnerabilities.

Products

Geyser 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.4
    CVE-2026-42188

    Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL

    Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of Bedrock player head texture data. By supplying a crafted Base64-encoded skin t…

    GeyserMC Geyser org.geysermc.geyser:core Maven