Lucene search
K

CVE-2026-42351 pygeoapi: Path Traversal in STAC FileSystemProvider

πŸ—“οΈΒ 08 May 2026Β 22:31:18Reported byΒ GitHub_MTypeΒ 
cvelist
Β cvelist
πŸ”—Β www.cve.orgπŸ‘Β 28Β Views

CVE-2026-42351: Path traversal in pygeoapi STAC FileSystemProvider exposes directories; fixed in 0.23.3.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-42351
8 May 202622:31
–attackerkb
Circl
CVE-2026-42351
8 May 202623:20
–circl
CNNVD
pygeoapi θ·―εΎ„ιεŽ†ζΌζ΄ž
8 May 202600:00
–cnnvd
CVE
CVE-2026-42351
8 May 202622:31
–cve
Github Security Blog
pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider
29 Apr 202622:18
–github
NVD
CVE-2026-42351
8 May 202623:16
–nvd
OSV
GHSA-F6PR-83PG-GHH6 pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider
29 Apr 202622:18
–osv
Positive Technologies
PT-2026-36111
29 Apr 202600:00
–ptsecurity
RedhatCVE
CVE-2026-42351
12 May 202608:20
–redhatcve
Snyk
Directory Traversal
29 Apr 202622:18
–snyk
Rows per page
[
  {
    "vendor": "geopython",
    "product": "pygeoapi",
    "versions": [
      {
        "version": ">= 0.23.0, < 0.23.3",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation