What’s Vulnerable › Products

geonode vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your geonode version is affected

Latest geonode vulnerabilities

• CVE-2026-39922 — GeoNode SSRF via Service Registration (CVSS 6.3)
• CVE-2026-39921 — GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload (CVSS 6.3)
• CVE-2024-27091 — GeoNode stored XSS to full account takeover (CVSS 6.1)
• CVE-2023-42439 — GeoNode SSRF Bypass to return internal host data (CVSS 6.5)
• CVE-2023-40017 — Geonode Server Side Request Forgery vulnerability (CVSS 7.5)
• CVE-2023-28442 — Geoserver for GeoNode sensitive information leak (CVSS 5.3)
• CVE-2023-26043 — XML External Entity (XXE) injection in GeoServer style upload functionality (CVSS 6.5)