aitest-cli (>=0.0.7, <=0.0.9), geonode (4.4.5) potentially affected by CVE-2024-6345 via setuptools (63.0.0)

setuptools PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.7, =0.0.9 - geonode 4.4.5 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

geonode (>=4.0.0rc0, <=4.0.0.post1) potentially affected by CVE-2024-38357 via django-tinymce (3.4.0)

django-tinymce PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode =4.0.0rc0, =4.0.0.post1 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-user-notification (>=0.8.0, <=0.10.2) +2 more potentially affected by CVE-2024-38356 via django-tinymce (3.7.1)

django-tinymce PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - bpp-iplweb =202304.1100.0, =0.8.0, =4.3.0, =0.64.0, =0.93.1 Source cves: CVE-2024-38356 Source advisory: OSV:PYSEC-2026-1301...

geonode (>=4.0.0rc0, <=4.0.0.post1) potentially affected by CVE-2024-38356 via django-tinymce (3.4.0)

django-tinymce PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode =4.0.0rc0, =4.0.0.post1 Source cves: CVE-2024-38356 Source advisory: OSV:PYSEC-2026-1301...

geonode (3.3.3) potentially affected by CVE-2024-38356 via django-tinymce (3.3.0)

django-tinymce PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode 3.3.3 Source cves: CVE-2024-38356 Source advisory: OSV:PYSEC-2026-1301...

geonode (>=4.1.0, <=4.2.5), grooveshop-django-api (>=0.6.0, <=0.63.0) +1 more potentially affected by CVE-2024-38356 via django-tinymce (3.6.1)

django-tinymce PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode =4.1.0, =0.6.0, =0.63.0 - repomaker 1.0.0b1 Source cves: CVE-2024-38356 Source advisory: OSV:PYSEC-2026-1301...

django-starter-toolkit (0.1.0), geonode (>=4.0.1, <=4.0.3) potentially affected by CVE-2024-38357 via django-tinymce (3.5.0)

django-tinymce PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-starter-toolkit 0.1.0 - geonode =4.0.1, =4.0.3 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...

bpp-iplweb (>=202304.1100.0, <=202504.1174.0), django-user-notification (>=0.8.0, <=0.10.2) +2 more potentially affected by CVE-2024-38357 via django-tinymce (3.7.1)

django-tinymce PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - bpp-iplweb =202304.1100.0, =0.8.0, =4.3.0, =0.64.0, =0.93.1 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...

geonode (>=4.1.0, <=4.2.5), grooveshop-django-api (>=0.6.0, <=0.63.0) +1 more potentially affected by CVE-2024-38357 via django-tinymce (3.6.1)

django-tinymce PYPI version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode =4.1.0, =0.6.0, =0.63.0 - repomaker 1.0.0b1 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...

geonode (3.3.3) potentially affected by CVE-2024-38357 via django-tinymce (3.3.0)

django-tinymce PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - geonode 3.3.3 Source cves: CVE-2024-38357 Source advisory: OSV:PYSEC-2026-1302...

django-starter-toolkit (0.1.0), geonode (>=4.0.1, <=4.0.3) potentially affected by CVE-2024-38356 via django-tinymce (3.5.0)

django-tinymce PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-tinymce and may be impacted: - django-starter-toolkit 0.1.0 - geonode =4.0.1, =4.0.3 Source cves: CVE-2024-38356 Source advisory: OSV:PYSEC-2026-1301...

geonode (3.3.3), hazard-feed (>=0.2.0, <=0.2.5) potentially affected by CVE-2024-21910 via django-tinymce (>=3.2.0, <=3.3.0)

django-tinymce PYPI version =3.2.0, =0.2.0, =0.2.5 Source cves: CVE-2024-21910 Source advisory: OSV:PYSEC-2026-632...

Server-side Request Forgery (SSRF)

Overview geonode is an application for serving and sharing geospatial data Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the service registration endpoint. An attacker can access internal network resources and sensitive endpoints by submitting crafted...

EUVD-2026-21581

GeoNode contains a server-side request forgery vulnerability in the service registration endpoint...

GeoNode contains a server-side request forgery vulnerability in the service registration endpoint

GeoNode versions 4.4.5 and 5.0.2 and prior within their respective releases contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbound network requests to arbitrary URLs by submitting a crafted service URL durin...

GHSA-HW9R-6M78-W6H3 GeoNode contains a server-side request forgery vulnerability in the service registration endpoint

GeoNode versions 4.4.5 and 5.0.2 and prior within their respective releases contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbound network requests to arbitrary URLs by submitting a crafted service URL durin...

aimmo (>=2.5.9, <=2.5.11), airavata-custos-portal (>=0.0.1, <=0.0.6) +23 more potentially affected by CVE-2026-6873 via django (3.2.16)

django PYPI version 3.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.5.9, =0.0.1, =0.1.26, =6.24.3, =6.24.3, =0.0.10, =0.1.2, =4.0.2, =4.0.3 - great-components 2.1.1 and more Source cves: CVE-2026-6873 Sourc...

geonode (4.4.5), mayan-edms (>=4.6.13, <=4.7.9) +4 more potentially affected by CVE-2026-6873 via django (4.2.29)

django PYPI version 4.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - geonode 4.4.5 - mayan-edms =4.6.13, =7.4.0, =7.4.0, =4.0.17, =4.0.18 - pheme 21.12.1 Source cves: CVE-2026-6873 Source advisory:...

aimmo (>=1.3.2b678, <=1.3.3), cfl-common (>=5.26.5, <=5.29.1) +7 more potentially affected by CVE-2026-6873 via django (2.2.25)

django PYPI version 2.2.25 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =1.3.2b678, =5.26.5, =5.26.5, =0.9.9, =3.4.5, =3.5.7 - zfl-blogs 2.1.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

djangodjangodjango (4.2.24), geonode (4.4.4) +1 more potentially affected by CVE-2026-48587 via django (4.2.24)

django PYPI version 4.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.2.24 - geonode 4.4.4 - mayan-edms =4.6.10, =4.10.0 Source cves: CVE-2026-48587 Source advisory: OSV:GHSA-923M-GV2P-W5QP...