https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T03:32:47.471739+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-55649 fkie_cve-2026-55649 2026-11-08T03:32:47.472958+00:00

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another user's browser when the document page is visited. This issue is fixed in version 5.0.3.

 https://db.gcve.eu/vuln/ghsa-r4hm-p9f9-fj9v GHSA-r4hm-p9f9-fj9v — GeoNode has Stored XSS in Documents metadata abstract field 2026-11-08T03:32:47.473017+00:00

Affected: PyPI: GeoNode

The abstract metadata of documents is not sanitised. It’s possible to store arbitrary HTML (and JS) that will be executed when visiting the page.