Skip to content
OpenAdvisories

Vendor

opengeos

10 known vulnerabilities.

Products

streamlit-geospatial 9 GeoLibre 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-86806

    opengeos GeoLibre _is_within_roots server-side request forgery

    A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this i…

    opengeos GeoLibre
  • High 7.5
    CVE-2024-41118

    streamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py

    streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the `url` variable on line 47 of `pages/7_📦_Web_Map_Service.py` takes user input, which is passed to `get_layers` function…

    opengeos streamlit-geospatial