pygeoapi vulnerabilities (PyPI)

2 vulnerabilities.

• pygeoapi PyPI pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber CVE-2026-42352 Fix available 8.6 HighApril 29, 2026
• pygeoapi PyPI pygeoapi: Path Traversal in STAC FileSystemProvider CVE-2026-42351 Fix available 7.5 HighApril 29, 2026