Threats affecting pkg:maven/org.geoserver.extension/gs-db2

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 1.1%	CVE-2025-27511org.geoserver.extension:gs-db2 · Deserialization of Untrusted Data High7.2EPSS 1.1%2026-06-18CVE Database V5CVE-2025-27511 GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes the issue. EPSS 1.1%Vulnerability CWE-502	CVE Database V5	2026-06-18

Page 1 of 1