geopython

Products

ProductCVEsExploitedLatest
pygeoapi2–May 8, 2026
OWSLib1–Mar 7, 2023

Exploited and recent CVEs

  • CVE-2026-42352 High 8.6 pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber 0.5%
  • CVE-2026-42351 High 7.5 pygeoapi: Path Traversal in STAC FileSystemProvider 0.5%
  • CVE-2023-27476 High 8.2 XML External Entity (XXE) Injection in OWSLib 1.0%