Skip to content
OpenAdvisories
High USN-8083-1 1 CVE

python-geopandas vulnerability

Published Mar 11, 2026 · Updated Mar 14, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GeoPandas incorrectly handled certain input. An
attacker could possibly use this issue to perform SQL injection attacks.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS python-geopandas 0.10.2-1ubuntu0.1
Ubuntu · 24.04 LTS 24.04:LTS python-geopandas 0.14.3-2ubuntu0.1
Ubuntu · 25.10 python-geopandas 1.0.1-2ubuntu0.1

Vulnerabilities 1

  • High 8.6
    CVE-2025-69662

    geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

    SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.

    geopandas python-geopandas python-geopandas Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2025-69662