geonode vulnerabilities (PyPI)

6 vulnerabilities.

• geonode PyPI GeoNode SSRF via Service Registration CVE-2026-39922 Fix available 5.3 MediumApril 10, 2026
• geonode PyPI GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload CVE-2026-39921 Fix available 5.3 MediumApril 10, 2026
• geonode PyPI GeoNode stored XSS to full account takeover CVE-2024-27091 Fix available 6.1 MediumMarch 27, 2024
• geonode PyPI GeoNode SSRF Bypass to return internal host data CVE-2023-42439 Fix available 7.5 HighSeptember 15, 2023
• geonode PyPI Geonode Server Side Request Forgery vulnerability CVE-2023-40017 Fix available 7.5 HighAugust 24, 2023
• geonode PyPI XML External Entity (XXE) injection in GeoServer style upload functionality CVE-2023-26043 Fix available 6.5 MediumFebruary 27, 2023