Vulnerability GHSA-rwcv-whm8-fmxm
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.1
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
3 months ago
July 13, 2026 at 04:44 PM UTC
GeoNode: Stored XSS to full account takeover
3.2.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.2.2
3.2.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.2.2
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
20 hours ago
GeoNode has Stored XSS in Documents metadata abstract field
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.2 GHSA-r4hm-p9f9-fj9v
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.2 GHSA-r4hm-p9f9-fj9v
Medium Risk
20 hours ago
GeoNode has Unrestricted File Upload
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.2 GHSA-fqpv-mq26-pr4j
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.2 GHSA-fqpv-mq26-pr4j
High Risk
20 hours ago
GeoNode has OS command injection via uploaded file layer name
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.3 and 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
2.0.dev20130913181950 and 2.0.dev20140626191247 and 2.0b3 and 2.0b4 and 2.0b5 and 2.0b7 and 2.0b10 and 2.0b11 and 2.0b12 and 2.0b13 and 2.0b17 and 2.0b18 and 2.0b19 and 2.0b21 and 2.0b22 and 2.0b24 and 2.0b25 and 2.0b26 and 2.0b27 and 2.0b28 and 2.0b29 and 2.0b30 and 2.0b31 and 2.0b32 and 2.0b33 and 2.0b34 and 2.0b35 and 2.0b36 and 2.0b37 and 2.0b38 and 2.0b39 and 2.0b40 and 2.0b41 and 2.0b42 and 2.0b43 and 2.0b44 and 2.0b45 and 2.0b46 and 2.0b48 and 2.0b49 and 2.0b50 and 2.0b51 and 2.0b52 and 2.0b53 and 2.0b54 and 2.0b55 and 2.0b57 and 2.0b58 and 2.0b59 and 2.0b60 and 2.0b61 and 2.0b62 and 2.0b63 and 2.0b64 and 2.0c1 and 2.0c2 and 2.0c3 and 2.0c4 and 2.0c5 and 2.0c7 and 2.0c8 and 2.0c12 and 2.0c13 and 2.0 and 2.0.1 and 2.4a1 and 2.4a2 and 2.4a3 and 2.4a4 and 2.4a5 and 2.4a6 and 2.4a7 and 2.4a8 and 2.4a9 and 2.4a10 and 2.4a11 and 2.4a12 and 2.4a13 and 2.4a14 and 2.4a15 and 2.4a16 and 2.4a17 and 2.4a18 and 2.4a19 and 2.4a20 and 2.4a21 and 2.4a22 and 2.4a23 and 2.4a24 and 2.4a25 and 2.4a26 and 2.4a28 and 2.4a29 and 2.4a30 and 2.4a31 and 2.4a32 and 2.4a33 and 2.4a34 and 2.4a35 and 2.4a36 and 2.4a38 and 2.4b1 and 2.4b2 and 2.4b3 and 2.4b4 and 2.4b5 and 2.4b6 and 2.4b7 and 2.4b8 and 2.4b10 and 2.4b11 and 2.4b12 and 2.4b13 and 2.4b14 and 2.4b15 and 2.4b16 and 2.4b17 and 2.4b18 and 2.4b19 and 2.4b20 and 2.4b21 and 2.4b22 and 2.4b23 and 2.4b24 and 2.4b25 and 2.4b26 and 2.4b27 and 2.4b28 and 2.4c1 and 2.4c2 and 2.4c3 and 2.4c4 and 2.4 and 2.4.1 and 2.5.dev20160825082804 and 2.5.1 - 2.5.7 and 2.5.9.dev20170116091328 and 2.5.9 - 2.5.10 and 2.5.12 - 2.5.15 and 2.6a1 and 2.6c1 and 2.6 and 2.6.1 - 2.6.3 and 2.7 and 2.7.1.dev20171013151516 and 2.7.2.dev20171013181854 and 2.7.4.dev20171114161428 and 2.7.5.dev20180123130714 and 2.7.5.dev20180125135927 and 2.8rc0 and 2.8rc1 and 2.8rc2 and 2.8rc3 and 2.8rc4 and 2.8rc5 and 2.8rc6 and 2.8rc7 and 2.8rc8 and 2.8rc9 and 2.8rc10 and 2.8rc11 and 2.8rc12 and 2.8rc13 and 2.8 and 2.8.1rc0 and 2.8.1 and 2.10rc0 and 2.10rc1 and 2.10rc2 and 2.10rc3 and 2.10rc4 and 2.10rc5 and 2.10 and 2.10.1 - 3.2.3 and 3.2.3.post1 and 3.2.4 - 3.3.1 and 3.3.1.post1 and 3.3.2 and 3.3.2.post1 and 3.3.2.post2 and 3.3.3 - 4.0.0rc0 and 4.0.0rc1 and 4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.3 and 5.0.3.post1 GHSA-9fpx-fr6j-2vh6
Medium Risk
5 months ago
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.1 GHSA-hw9r-6m78-w6h3
4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.1 GHSA-hw9r-6m78-w6h3
Medium Risk
7 months ago
No summary available
4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.1 PYSEC-2026-2159
4.0.0 and 4.0.0.post1 and 4.0.1 - 4.1.3 and 4.1.3.post1 and 4.1.4 - 4.3.0 and 4.3.0.post1 and 4.3.1 - 5.0.1 PYSEC-2026-2159
Impacted packages
Timeline
Published
3 months ago
July 13, 2026 at 04:44 PM UTC
Fixed (4.2.3)
2 years ago
March 27, 2024 at 01:06 PM UTC
Last Modified
3 months ago
July 13, 2026 at 05:00 PM UTC