CVE-2026-76904 | GeoTools up to 33.5/34.4/35.0 DataStore jsonArrayContains sql injection

A vulnerability has been found in GeoTools up to 33.5/34.4/35.0 and classified as critical. Impacted is the function jsonArrayContains of the component DataStore. This manipulation causes sql injection.

This vulnerability is handled as CVE-2026-76904. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More