- Severity: MEDIUM
- CVE: CVE-2026-46429
- Ecosystems: pip
- Packages: GeoNode
The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files.
Source: GitHub Security Advisories · 2026-11-06