Geopython vulnerabilities

Products

• Pygeoapi 2

Newest

• geopython pygeoapi pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber CVE-2026-42352 Fix available 8.6 HighApril 29, 2026
• geopython pygeoapi pygeoapi: Path Traversal in STAC FileSystemProvider CVE-2026-42351 Fix available 7.5 HighApril 29, 2026
• geopython owslib XML External Entity (XXE) Injection in OWSLib CVE-2023-27476 Fix available 8.2 HighMarch 7, 2023