GGeoNode

Products

Exploited and recent CVEs

• CVE-2026-39922 Medium 5.3 GeoNode SSRF via Service Registration 0.2%
• CVE-2026-39921 Medium 5.3 GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload 0.2%
• CVE-2024-27091 Medium 6.1 GeoNode stored XSS to full account takeover 0.4%
• CVE-2023-42439 High 7.5 GeoNode SSRF Bypass to return internal host data 1.0%
• CVE-2023-40017 High 7.5 Geonode Server Side Request Forgery vulnerability 0.8%
• CVE-2023-28442 High 7.5 Geoserver for GeoNode sensitive information leak 0.6%
• CVE-2023-26043 Medium 6.5 XML External Entity (XXE) injection in GeoServer style upload functionality 0.8%