https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-58175.htmlhttps://patchthecve.com/cve/CVE-2025-58175.htmlTue, 06 Oct 2026 22:10:00 +0000MEDIUM 6.5: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow attacker to perform unauthenticated Server-Side Request Forgery (SSRF). This vulnerability requires that GeoServehttps://patchthecve.com/cve/CVE-2025-52465.htmlhttps://patchthecve.com/cve/CVE-2025-52465.htmlTue, 06 Oct 2026 22:10:00 +0000HIGH 7.2: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page https://patchthecve.com/cve/CVE-2025-27511.htmlhttps://patchthecve.com/cve/CVE-2025-27511.htmlTue, 06 Oct 2026 22:10:00 +0000HIGH 7.2: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE). Version 2.27.0 fixes