PYSEC-2026-4218 geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

Impact geopy.Point and Point.fromstring may take excessive CPU time when parsing long, malformed coordinate strings due to inefficient regular-expression behavior. The numeric Point constructor is not affected. Geocoders' reverse methods called with string inputs exercise the vulnerable path...

Denial-of-service (DoS)

geopy is vulnerable to a Denial-of-service DoS. The vulnerability is due to excessive CPU consumption when parsing long, malformed coordinate strings, which allows an attacker to cause denial of service by repeatedly sending attacker-controlled requests containing crafted input...

GHSA-MHVH-FQ92-PFMR geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

Impact geopy.Point and Point.fromstring may take excessive CPU time when parsing long, malformed coordinate strings due to inefficient regular-expression behavior. The numeric Point constructor is not affected. Geocoders' reverse methods called with string inputs exercise the vulnerable path...