https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 03:32:48 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-33050 <p>GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands on the GeoNode server. This issue is fixed in version 5.1.0.</p> <p>GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands on the GeoNode server. This issue is fixed in version 5.1.0.</p> https://db.gcve.eu/vuln/fkie_cve-2026-33050 https://db.gcve.eu/vuln/ghsa-9fpx-fr6j-2vh6 <p><strong>Affected:</strong> PyPI: GeoNode</p> <p>Arbitrary OS commands can be executed on the GeoNode by uploading a vector file with a crafted layer name.</p> <p><strong>Affected:</strong> PyPI: GeoNode</p> <p>Arbitrary OS commands can be executed on the GeoNode by uploading a vector file with a crafted layer name.</p> https://db.gcve.eu/vuln/ghsa-9fpx-fr6j-2vh6