geonode has 5 CVEs on record between 2023 and 2026. The median CVSS is 6.5 (medium). None have a confirmed exploitation report.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 6.5
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

CWE-79 1

Products

geonode 5

Follow geonode:RSS feed Save a search →Embed badge ↗

5

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

geonode vulnerabilities

CVEs affecting geonode, newest first. Open any entry for full detail, references, and exploit status.

5 CVEsRSS

CVE-2024-27091Medium· 6.1

GeoNode: Stored XSS to full account takeover

GeoNode: Stored XSS to full account takeover

▾ Sunlitgeonode · geonodeEPSS 0.38%via GHSA

CVE-2026-39921Medium· 6.3

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated user…

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malici…

▾ Sunlitgeonode · geonodeEPSS 0.22%via OSV

CVE-2023-40017High· 7.5

GeoNode Server Side Request forgery

GeoNode Server Side Request forgery

▾ Twilightgeonode · geonodeEPSS 0.76%via OSV

CVE-2023-26043Medium· 6.5

GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection

GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection

▾ Sunlitgeonode · geonodeEPSS 0.84%via OSV

CVE-2023-42439High· 7.5

GeoNode vulnerable to SSRF Bypass to return internal host data

GeoNode vulnerable to SSRF Bypass to return internal host data

▾ Twilightgeonode · geonodeEPSS 0.96%via OSV

geonode vulnerabilities (CVEs) · VulnSea