GeoServer

by Open Source Geospatial Foundationv3.0.1

Last updated Aug 31, 2026

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

Install with winget

$ winget install --id OSGeo.GeoServer --exact --version 3.0.1

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for GeoServer

GeoServer uses EXE (NSIS). The silent install switches are /S.

One-line silent install (x64, machine scope)

installer.exe /S

See the full silent install reference for GeoServer →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v3.0.1

Architecture	Type	Scope	Install	Download
x64	EXE NSIS	machine		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

16 known CVEs via NVD

medium6.5Patched in wingetCVE-2025-58175affects before 2.26.4, 2.27.3Jun 18, 2026
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` may allow attacker to perform unauthenticated Server-Side Request Forgery (SSRF). This vulnerability r...
Patch Vendor advisory
high7.2Patched in wingetCVE-2025-52465affects before 2.26.4, 2.27.3Jun 18, 2026
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Pa...
Patch Vendor advisory
high7.2Patched in wingetCVE-2025-27511affects before 2.27.0Jun 18, 2026
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an administrator can perform a JNDI attack through specially crafted DB2 jdbc url leading to to Remote Code Execution (RCE)....
Vendor advisory
critical9.9Patched in wingetCVE-2025-30220affects before 2.25.7, 2.26.3Jun 10, 2025
GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity (XXE) exploit. This impacts whoever exposes XML processing with gt-xsd...
Patch
high7.5Patched in wingetCVE-2025-30145affects before 2.25.7, 2.26.3Jun 10, 2025
GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation in WMS dynamic styles or as a WPS process, that can enter an infinite loop to trigger denial of ser...
Patch
medium5.3Patched in wingetCVE-2025-27505affects before 2.25.6, 2.26.3Jun 10, 2025
GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST API security handles rest and its subpaths but not rest with an extension (e.g., rest.html). The RES...
Patch
medium5.5Patched in wingetCVE-2024-40625affects before 2.26.0Jun 10, 2025
GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{format} allows attackers to upload files with a specified url (with {method} equals 'url') with no restr...
Patch
medium5.3Patched in wingetCVE-2024-38524affects before 2.25.6, 2.26.2Jun 10, 2025
GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletRequest, HttpServletResponse) has no check to hide potentially sensitive information from users except for a hidden system pro...
Patch

Showing 8 of 16. Source: NVD, updated just now. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Frequently asked questions

How do I install GeoServer on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id OSGeo.GeoServer --exact --version 3.0.1. winget downloads the installer from Open Source Geospatial Foundation and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install GeoServer silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id OSGeo.GeoServer --exact 3.0.1 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

What are the silent install switches for GeoServer?

GeoServer uses EXE (NSIS). Run the downloaded installer with: installer.exe /S. The silent switches are /S.

How do I uninstall GeoServer via winget?

Run: winget uninstall --id OSGeo.GeoServer --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from GeoServer's Apps & Features entry.

Is GeoServer free?

GeoServer is distributed under GPL-2.0. Refer to the publisher (https://geoserver.org/) for the full license terms - Wingetly itself does not charge for installation.

Does GeoServer work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls GeoServer directly from the publisher.

How do I keep GeoServer up to date?

Run winget upgrade --id OSGeo.GeoServer --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of GeoServer from microsoft/winget-pkgs.

Recent versions

3.0.1latest
3.0.0
2.28.4
2.28.2
2.28.1
2.28.0
2.27.2
2.27.1
2.27.0
2.26.1