SQL Injection

Overview geopandas is a Geographic pandas extensions Affected versions of this package are vulnerable to SQL Injection in the topostgis function, which can be injected into via the geomname parameter to renamegeometry. An attacker can execute malicious SQL and retrieve the database server version...