https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T16:18:57.142514+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-42352 CVE-2026-42352 — pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber 2026-10-16T16:18:57.162523+00:00

Affected: geopython pygeoapi

pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to requests to internal HTTP services. This issue has been patched in version 0.23.3.