Lucene search
+L

27 matches found

OSV
OSV
added 2026/07/13 3:2 p.m.7 views

PYSEC-2026-2986 pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

Impact OGC API - Process execution requests can use the subscriber object to requests to internal HTTP services. Patches The issue has been patched in master branch and made available as part of the 0.23.3 release. The patch disables any HTTP requests made to internal resources by default unless...

8.6CVSS6.1AI score0.00454EPSS
SaveExploits0References7
Rows per page
Query Builder