15 Total advisories
15 Vulnerabilities
0 Malware
Dependency scanning
Check whether geonode is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
MEDIUM 6.3
CVE-2026-55649
GeoNode has Stored XSS in Documents metadata abstract field
MEDIUM 5.5
CVE-2026-46429
GeoNode has Unrestricted File Upload
HIGH 8.8
CVE-2026-33050
GeoNode has OS command injection via uploaded file layer name
HIGH 7.5
CVE-2023-40017
GeoNode Server Side Request forgery
MEDIUM 6.5
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
HIGH 7.5
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
MEDIUM 6.1
CVE-2024-27091
GeoNode: Stored XSS to full account takeover
MEDIUM 6.3
CVE-2026-39921
CVE-2026-39921
MEDIUM 6.1
CVE-2024-27091
CVE-2024-27091
MEDIUM 6.3
CVE-2026-39922
GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
MEDIUM 6.3
GHSA-v8f7-cg9p-w5jx
Duplicate Advisory: GeoNode contains a server-side request forgery vulnerability in the service registration endpoint
MEDIUM 6.3
CVE-2026-39922
CVE-2026-39922
MEDIUM 6.5
CVE-2023-42439
CVE-2023-42439
HIGH 7.5
CVE-2023-40017
CVE-2023-40017
UNKNOWN
CVE-2023-26043
CVE-2023-26043
Browse more PyPI advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes