maven package report

Is org.geotools:gt-jdbc safe?

1 known vulnerability, worst severity CRITICAL.

cvss

9.8

how bad it is if exploited, out of 10

epss

1.1%

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-99c3-qc2q-p94m, the advisory selected below

// advisories

GHSA-99c3-qc2q-p94m

CRITICALCVE-2023-25158

GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore.

Affected: < 24.7, >= 25.0, < 25.7, >= 26.0, < 26.7, >= 27.0, < 27.4, >= 28.0, < 28.2
Fixed in: 24.7
Weakness: CWE-89
Published: 2023-02-22
Source: github

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 00:49 UTC. The most recent advisory here was published 2023-02-22. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.geotools:gt-jdbc safe? maven package security report | CyberXYZ