https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:09:50.781707+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-191361 EUVD-2026-191361 2026-10-07T00:09:50.860534+00:00 EUVD-2026-191361 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40017 fkie_cve-2023-40017 2026-10-07T00:09:50.860572+00:00

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and request information from internal hosts. A patch is available at commit a9eebae80cb362009660a1fd49e105e7cdb499b9.

 https://cve.radiocsirt.org/vuln/ghsa-rmxg-6qqf-x8mr GHSA-rmxg-6qqf-x8mr — GeoNode Server Side Request forgery 2026-10-07T00:09:50.860607+00:00

Affected: PyPI: geonode

### Summary A server side request forgery vuln was found within geonode when testing on a bug bounty program. Server side request forgery allows a user to request information on the internal service/services.

### Details The endpoint /proxy/?url= does not properly protect against SSRF. when using the following format you can request internal hosts and display data. /proxy/?url=http://169.254.169.254\@whitelistedIPhere. This will state wether the AWS internal IP is alive. If you get a 404, the host is alive. A non alive host will not display a response. To display metadata, use a hashfrag on the url /proxy/?url=http://169.254.169.254\@#whitelisteddomain.com or try /proxy/?url=http://169.254.169.254\@%23whitelisteddomain.com

### Impact Port scan internal hosts, and request information from internal hosts.

 https://cve.radiocsirt.org/vuln/gsd-2023-40017 gsd-2023-40017 2026-10-07T00:09:50.860640+00:00 gsd-2023-40017 https://cve.radiocsirt.org/vuln/pysec-2023-269 PYSEC-2023-269 2026-10-07T00:09:50.860652+00:00

Affected: PyPI: geonode

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint `/proxy/?url=` does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and request information from internal hosts. A patch is available at commit a9eebae80cb362009660a1fd49e105e7cdb499b9.