Vulnerability GHSA-fqpv-mq26-pr4j
Medium Risk
MEDIUM RISK
CVSS Score: 5.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
20 hours ago
November 06, 2026 at 07:41 PM UTC
GeoNode has Unrestricted File Upload
2.0.dev20130913181950 - 5.0.2
2.0.dev20130913181950 - 5.0.2
Summary
GeoNode has Unrestricted File Upload
Details
The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
20 hours ago
GeoNode has Stored XSS in Documents metadata abstract field
2.0.dev20130913181950 - 5.0.2 GHSA-r4hm-p9f9-fj9v
2.0.dev20130913181950 - 5.0.2 GHSA-r4hm-p9f9-fj9v
High Risk
20 hours ago
GeoNode has OS command injection via uploaded file layer name
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
Medium Risk
3 months ago
GeoNode: Stored XSS to full account takeover
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
Medium Risk
5 months ago
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 GHSA-hw9r-6m78-w6h3
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 GHSA-hw9r-6m78-w6h3
Medium Risk
7 months ago
No summary available
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
Impacted packages
Timeline
Published
20 hours ago
November 06, 2026 at 07:41 PM UTC
Last Modified
19 hours ago
November 06, 2026 at 08:00 PM UTC