Mapserver - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-17.

Products

CVE-2026-54355 - CVSS 5.3 (medium), 2026-09-17: MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for…
CVE-2026-54354 - CVSS 8.2 (high), 2026-09-17: MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and…
CVE-2026-45104 - CVSS 7.5 (high), 2026-05-27: MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule,…
CVE-2026-42030 - CVSS 6.1 (medium), 2026-05-08: MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS…
CVE-2026-33721 - CVSS 7.5 (high), 2026-03-27: MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in…
CVE-2025-59431 - CVSS 9.8 (critical), 2025-09-19: MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based…