https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 03:32:48 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-55649 <p>GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another user&#39;s browser when the document page is visited. This issue is fixed in version 5.0.3.</p> <p>GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, document abstract metadata is stored without sanitization, allowing a low-privileged remote user to persist arbitrary HTML and JavaScript that executes in another user&#39;s browser when the document page is visited. This issue is fixed in version 5.0.3.</p> https://db.gcve.eu/vuln/fkie_cve-2026-55649 https://db.gcve.eu/vuln/ghsa-r4hm-p9f9-fj9v <p><strong>Affected:</strong> PyPI: GeoNode</p> <p>The abstract metadata of documents is not sanitised. It’s possible to store arbitrary HTML (and JS) that will be executed when visiting the page.</p> <p><strong>Affected:</strong> PyPI: GeoNode</p> <p>The abstract metadata of documents is not sanitised. It’s possible to store arbitrary HTML (and JS) that will be executed when visiting the page.</p> https://db.gcve.eu/vuln/ghsa-r4hm-p9f9-fj9v