MEDIUM 5.5 PyPI
GeoNode has Unrestricted File Upload
GHSA-fqpv-mq26-pr4j · CVE-2026-46429
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files.
References
- WEB https://github.com/GeoNode/geonode/security/advisories/GHSA-fqpv-mq26-pr4j
- WEB https://github.com/GeoNode/geonode/pull/14223
- WEB https://github.com/GeoNode/geonode/pull/14224
- WEB https://github.com/GeoNode/geonode/commit/16ec8b3914fe87d0a258c14cf73b0a4295bb072f
- WEB https://github.com/GeoNode/geonode/commit/239a6b49c925957197033831df5f20c4c13a14da
- PACKAGE https://github.com/GeoNode/geonode
- WEB https://github.com/GeoNode/geonode/releases/tag/5.0.3
Ready to move
Start Securing
Free, no credit card | First findings in minutes