GHSA-6497-prx7-gpmq
High · 8.6CVSS
8.6
EPSS
—
Published
Jan 30, 2026
CISA due date
—
The record
geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | geopandas | 0 | 1.1.2 |
Related vulnerabilities
- CVE-2025-69662 SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain… Same vulnerability
- CVE-2026-16520 Improper input validation and Exposure of sensitive information through data queries… CWE-202
- CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph… CWE-202
- CVE-2026-70473 Flowise is a drag-and-drop user interface for building customized large language model… CWE-202
- CVE-2026-42797 Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. CWE-202
- CVE-2026-40245 Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core… CWE-202
- CVE-2026-30778 The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration… CWE-202
- CVE-2026-33530 InvenTree is an Open Source Inventory Management System. CWE-202