{"action":"Upgrade geonode to 4.1.3.post1 or later.","affected":[{"fixed":"4.1.3.post1","introduced":"3.2.0"}],"component":"geonode","cve_ids":["CVE-2023-42439"],"ecosystem":"PyPI","epss":0.00962,"exploited":false,"fixed_versions":["4.1.3.post1"],"ghsa_id":"GHSA-pxg5-h34r-7q8p","id":"tcs_01M5KFTYYHH16X6BPM9AQMH3EZ","modified_at":"2026-09-10T03:50:03.297287849Z","published_at":"2023-09-20T23:04:44Z","references":["https://osv.dev/vulnerability/GHSA-pxg5-h34r-7q8p","https://github.com/GeoNode/geonode/security/advisories/GHSA-pxg5-h34r-7q8p","https://nvd.nist.gov/vuln/detail/CVE-2023-42439","https://github.com/GeoNode/geonode/commit/79ac6e70419c2e0261548bed91c159b54ff35b8d","https://github.com/GeoNode/geonode","https://github.com/GeoNode/geonode/releases/tag/4.1.3","https://github.com/pypa/advisory-database/tree/main/vulns/geonode/PYSEC-2023-176.yaml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-pxg5-h34r-7q8p","url":"https://osv.dev/vulnerability/GHSA-pxg5-h34r-7q8p"}],"summary":"GeoNode vulnerable to SSRF Bypass to return internal host data"}