mapfish-print vulnerabilities

2 known vulnerabilities in mapfish-print from Mapfish. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  mapfish-print: Improper Restriction of XML External Entity Reference

  CVE-2026-55848Aug 28, 2026Mapfish

  mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML p

• 9.3 Critical severity

  mapfish-print: Improper Control of Generation of Code

  CVE-2026-44672May 28, 2026Mapfish

  mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is f