geonode Latest Vulnerabilities

Latest vulnerabilities published by geonode

JSON RSS CSV 🔔 Create Alert Trigger

6 November 2026

Cross-Site Scripting in GeoNode Geospatial Management System
CVE-2026-55649
GeonodeGeonode6.3MEDIUM
File Upload Vulnerability in GeoNode by GeoGig
CVE-2026-46429
GeonodeGeonode5.5MEDIUM
Shell Command Injection Vulnerability in GeoNode Geospatial CMS
CVE-2026-33050
GeonodeGeonode8.8HIGH

10 April 2026

Server-Side Request Forgery Vulnerability in GeoNode by GeoSolutions
CVE-2026-39922
GeonodeGeonode5.3MEDIUM
Server-Side Request Forgery in GeoNode Versions Prior to 4.4.5 and 5.0.2
CVE-2026-39921
GeonodeGeonode5.3MEDIUM

27 March 2024

GeoNode Vulnerable to Stored XSS and Full Account Takeover
CVE-2024-27091
GeonodeGeonode6.1MEDIUM

15 September 2023

GeoNode SSRF Bypass to return internal host data
CVE-2023-42439
GeoNodegeonode6.5MEDIUM

24 August 2023

Geonode Server Side Request Forgery vulnerability
CVE-2023-40017
GeonodeGeonode7.5HIGH

24 March 2023

Geoserver for GeoNode sensitive information leak
CVE-2023-28442
GeonodeGeonode7.5HIGH

27 February 2023

XML External Entity (XXE) injection in GeoServer style upload functionality
CVE-2023-26043
GeonodeGeonode6.5MEDIUM