{"uuid": "782b0a8a-f9f5-41e2-a291-58fe9706929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-mqjf-5f49-2fjh", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtg2lu7yrt2c", "content": "\ud83d\udea8 BREAKING: GeoServer zero-day (GHSA-mqjf-5f49-2fjh, CVSS 9.8) \u2014 SQLi in jsonArrayContains with PostGIS leads to RCE. Exploited within hours of Aug 12 disclosure by @q1uf3ng. Patches: 3.0.1, 2.28.5, 2.27.6. Restrict public access NOW. Src: The Hacker News", "creation_timestamp": "2026-08-19T06:01:51.212998Z"}