PyPI/geonode CVE-2023-42439: medium 6.5, EPSS 0.96%
GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A SSRF vulnerability exists starting in version 3.2.0, bypassing existing controls
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
CVE-2023-42439 · published · modified · JSON