geopython pygeoapi

• CVE-2026-42352 High 8.6 pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber 0.5%
• CVE-2026-42351 High 7.5 pygeoapi: Path Traversal in STAC FileSystemProvider 0.5%