MEDIUM6.3PyPI
GHSA-hw9r-6m78-w6h3· CVE-2026-39922, PYSEC-2026-61GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
Modified: 6/8/2026
package
PyPI/geonode
pkg:pypi/geonode
MEDIUM6.5PyPI
GHSA-mcmc-c59m-pqq8· CVE-2023-26043, PYSEC-2023-15GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-pxg5-h34r-7q8p· CVE-2023-42439, PYSEC-2023-176GeoNode vulnerable to SSRF Bypass to return internal host data
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-rmxg-6qqf-x8mr· CVE-2023-40017, PYSEC-2023-269GeoNode Server Side Request forgery
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-rwcv-whm8-fmxm· CVE-2024-27091, PYSEC-2024-320GeoNode: Stored XSS to full account takeover
Modified: 7/13/2026
—PyPI
PYSEC-2023-15· CVE-2023-26043, GHSA-mcmc-c59m-pqq8Modified: 11/8/2023
MEDIUM6.5PyPI
PYSEC-2023-176· CVE-2023-42439, GHSA-pxg5-h34r-7q8pModified: 10/9/2025
HIGH7.5PyPI
PYSEC-2023-269· CVE-2023-40017, GHSA-rmxg-6qqf-x8mrModified: 11/21/2024
MEDIUM6.1PyPI
PYSEC-2024-320· CVE-2024-27091, GHSA-rwcv-whm8-fmxmModified: 7/13/2026
MEDIUM6.3PyPI
PYSEC-2026-2159· CVE-2026-39921Modified: 7/13/2026
MEDIUM6.3PyPI
PYSEC-2026-61· CVE-2026-39922, GHSA-hw9r-6m78-w6h3Modified: 5/20/2026