{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.2.0"}],"component":"geonode","cve_ids":["CVE-2023-42439"],"ecosystem":"PyPI","epss":0.00962,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pxg5-h34r-7q8p","id":"tcs_01M5KGJPTD87CJ7M1GQJ9G8FEP","modified_at":"2025-10-09T08:24:28.295380Z","published_at":"2023-09-15T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-176","https://github.com/GeoNode/geonode/security/advisories/GHSA-pxg5-h34r-7q8p"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-176","url":"https://osv.dev/vulnerability/PYSEC-2023-176"}],"summary":"GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A SSRF vulnerability exists starting in version 3.2.0, bypassing existing controls"}