{"uuid": "f98e41cf-1ff4-425c-8f77-500bfc8c306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mt6cnagzpw2o", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-16T04:04:29.310813Z"}