- Severity: MEDIUM
- CVE: CVE-2026-55649
- Ecosystems: pip
- Packages: GeoNode
The abstract metadata of documents is not sanitised. It’s possible to store arbitrary HTML (and JS) that will be executed when visiting the page.
Source: GitHub Security Advisories · 2026-11-06