CVE-2026-42352

8.6 Élevée

Publiée le 09/05/2026 à 01:16 · Modifiée le 24/07/2026 à 23:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to requests to internal HTTP services. This issue has been patched in version 0.23.3.

Traduire en français

Produits concernés

geopython pygeoapi

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.6 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/geopython/pygeoapi/commit/3a63f5b0cc6275e3ae0edb47726b13a43cdd90ef
https://github.com/geopython/pygeoapi/releases/tag/0.23.3
https://github.com/geopython/pygeoapi/security/advisories/GHSA-jgvc-94c8-3chc

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories