原始 OSV JSON
{
"id": "GHSA-mqjf-5f49-2fjh",
"aliases": [
"CVE-2026-76904"
],
"details": "### Summary\n\nAn SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation:\n\n* `jsonArrayContains` function \n Requires PostGIS 12 or greater with a String or JSON field\n\nFor PostGIS 12 and greater `jsonArrayContains(<column>, <pointer>, <value>)` function writes `<value>` into generated SQL without escaping.\n\n### Patches\n\n* GeoTools 35.1\n* GeoTools 33.5\n* GeoTools 34.4\n\n### Mitigation\n\nNo mitigation is available:\n\n* To limit scope of SQL Injection the PostGIS connection pool should be configured with limited rights.\n\n### Impact\n\nThis vulnerability can lead to execution of arbitrary SQL expressions in the database.\n\n### References\n\n* https://osgeo-org.atlassian.net/browse/GEOT-7958\n* https://osgeo-org.atlassian.net/browse/GEOT-7959\n* https://github.com/geotools/geotools/pull/5829\n* https://osgeo-org.atlassian.net/browse/GEOT-7589",
"summary": "GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "35.0"
},
{
"fixed": "35.1"
}
]
}
],
"package": {
"name": "org.geotools.jdbc:gt-jdbc-postgis",
"ecosystem": "Maven"
},
"versions": [
"35.0"
]
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "34.0"
},
{
"fixed": "34.5"
}
]
}
],
"package": {
"name": "org.geotools.jdbc:gt-jdbc-postgis",
"ecosystem": "Maven"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "30.5"
},
{
"fixed": "33.6"
}
]
}
],
"package": {
"name": "org.geotools.jdbc:gt-jdbc-postgis",
"ecosystem": "Maven"
}
}
],
"modified": "2026-08-21T20:26:29Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"published": "2026-08-21T20:25:41Z",
"references": [
{
"url": "https://github.com/geotools/geotools/security/advisories/GHSA-mqjf-5f49-2fjh",
"type": "WEB"
},
{
"url": "https://github.com/geotools/geotools/pull/5829",
"type": "WEB"
},
{
"url": "https://github.com/geotools/geotools/commit/d821c4d321dd91c22e31fcd5b1ce676645da5176",
"type": "WEB"
},
{
"url": "https://github.com/geotools/geotools",
"type": "PACKAGE"
},
{
"url": "https://github.com/geotools/geotools/releases/tag/33.6",
"type": "WEB"
},
{
"url": "https://github.com/geotools/geotools/releases/tag/34.5",
"type": "WEB"
},
{
"url": "https://github.com/geotools/geotools/releases/tag/35.1",
"type": "WEB"
},
{
"url": "https://osgeo-org.atlassian.net/browse/GEOT-7589",
"type": "WEB"
},
{
"url": "https://osgeo-org.atlassian.net/browse/GEOT-7958",
"type": "WEB"
},
{
"url": "https://osgeo-org.atlassian.net/browse/GEOT-7959",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": true,
"nvd_published_at": null,
"github_reviewed_at": "2026-08-21T20:25:41Z"
}
}