geonode
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| GeoNode has Stored XSS in Documents metadata abstract field | geonode | PyPI | Medium | Fix reported | |
| GeoNode has Unrestricted File Upload | geonode | PyPI | Medium | Fix reported | |
| GeoNode has OS command injection via uploaded file layer name | geonode | PyPI | High | Fix reported | |
| GeoNode Server Side Request forgery | geonode | PyPI | High | Fix reported | |
| GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection | geonode | PyPI | High | Fix reported | |
| GeoNode vulnerable to SSRF Bypass to return internal host data | geonode | PyPI | High | Fix reported | |
| GeoNode: Stored XSS to full account takeover | geonode | PyPI | Medium | Fix reported | |
| PYSEC-2026-2159 | geonode | PyPI | Medium | Fix reported | |
| GeoNode contains a server-side request forgery vulnerability in the service registration endpoint | geonode | PyPI | Medium | Fix reported |