CVE-2026-86806

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...

CVE-2026-86806

opengeos GeoLibre versions up to 2.3.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the _is_within_roots function. The flaw allows a remote attacker with no privileges and no user interaction to forge server-side requests, resulting in low impact to confidentiality, integ...

EUVD-2026-74051

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...