Vulnerability GHSA-hw9r-6m78-w6h3
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
5 months ago
June 08, 2026 at 12:51 PM UTC
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
20 hours ago
GeoNode has Stored XSS in Documents metadata abstract field
2.0.dev20130913181950 - 5.0.2 GHSA-r4hm-p9f9-fj9v
2.0.dev20130913181950 - 5.0.2 GHSA-r4hm-p9f9-fj9v
Medium Risk
20 hours ago
GeoNode has Unrestricted File Upload
2.0.dev20130913181950 - 5.0.2 GHSA-fqpv-mq26-pr4j
2.0.dev20130913181950 - 5.0.2 GHSA-fqpv-mq26-pr4j
High Risk
20 hours ago
GeoNode has OS command injection via uploaded file layer name
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
2.0.dev20130913181950 - 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
Medium Risk
3 months ago
GeoNode: Stored XSS to full account takeover
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
3.2.1 - 4.2.2 GHSA-rwcv-whm8-fmxm
Medium Risk
7 months ago
No summary available
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
4.0.0 - 4.4.4 and 5.0.0 - 5.0.1 PYSEC-2026-2159
Impacted packages
Timeline
Published
5 months ago
June 08, 2026 at 12:51 PM UTC
Fixed (4.4.5)
7 months ago
March 20, 2026 at 10:18 AM UTC
Fixed (5.0.2)
7 months ago
March 31, 2026 at 03:39 PM UTC
Last Modified
5 months ago
June 08, 2026 at 01:00 PM UTC