GeoNode vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 20241
3. 20265

Newest CVEs

• CVE-2026-55649

  GeoNode has Stored XSS in Documents metadata abstract field

  GeoNode · geonode

  Medium6.3
• CVE-2026-46429

  GeoNode: Unrestricted File Upload

  GeoNode · geonode

  Medium5.5
• CVE-2026-33050

  GeoNode: OS command injection via uploaded file layer name

  GeoNode · geonode

  High8.8
• CVE-2026-39922

  GeoNode SSRF via Service Registration

  GeoNode · GeoNode

  Medium5.3
• CVE-2026-39921

  GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

  GeoNode · GeoNode

  Medium5.3
• CVE-2024-27091

  GeoNode stored XSS to full account takeover

  GeoNode · geonode

  Medium6.1
• CVE-2023-42439

  GeoNode SSRF Bypass to return internal host data

  GeoNode · geonode

  High7.5
• CVE-2023-40017

  Geonode Server Side Request Forgery vulnerability

  GeoNode · geonode

  High7.5
• CVE-2023-28442

  Geoserver for GeoNode sensitive information leak

  GeoNode · geonode

  High7.5
• CVE-2023-26043

  XML External Entity (XXE) injection in GeoServer style upload functionality

  GeoNode · geonode

  Medium6.5