MapServer vulnerabilities
We track 4 vulnerabilities in MapServer products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
Latest MapServer vulnerabilities
- 8.2 High severity
MapServer: Improper Neutralization of Special Elements used in an SQL Command
MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter() treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and metadata su
- 7.5 High severity
MapServer: NULL Pointer Dereference
MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule> carrying <ElseFilter/> — it assumes msSLDParseRule added one class. When the r
- 7.5 High severity
MapServer: Out-of-bounds Write
MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer pr
- 9.8 Critical severity
MapServer: Improper Neutralization of Special Elements used in an SQL Command
MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems like expression checking is bypassed by introducing double quote characters in t