What’s Vulnerable › Products

GeyserMC Geyser vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your GeyserMC Geyser version is affected

Latest GeyserMC Geyser vulnerabilities

• CVE-2026-42188 — Geyser: Server-Side Request Forgery (SSRF) via Player Head Texture URL (CVSS 4.3)
• CVE-2021-39177 — User impersonation due to incorrect handling of the login JWT (CVSS 9.8)