https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-50899.htmlhttps://patchthecve.com/cve/CVE-2022-50899.htmlWed, 17 Jun 2026 05:24:22 +0000MEDIUM 6.5: Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server. Attackers can exploit the insecure XML parser by crafting a malicious XML document with external entity references to read system files throhttps://patchthecve.com/cve/CVE-2025-30220.htmlhttps://patchthecve.com/cve/CVE-2025-30220.htmlWed, 17 Jun 2026 09:08:22 +0000CRITICAL 9.9: GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity (XXE) exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in parhttps://patchthecve.com/cve/CVE-2024-32037.htmlhttps://patchthecve.com/cve/CVE-2024-32037.htmlWed, 17 Jun 2026 07:29:09 +0000NONE 0.0: GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software us