GeoNode vulnerabilities
We track 2 vulnerabilities in GeoNode products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest GeoNode vulnerabilities
- 8.8 High severity
geonode: Improper Neutralization of Special Elements used in an OS Command
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute
- 7.5 High severity
geonode: Server-Side Request Forgery
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an atta