opengeos

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

opengeos records in CISA KEV

No opengeos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Streamlit-geospatial 9 records HIGH

Records

10 records

TI-2024-27472 CVE-2024-41120

streamlit-geospatial blind SSRF in pages/9_🔲_Vector_Data_Visualization.py

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00786 Published 2024-07-26 No fix listed CWE-20

TI-2024-27471 CVE-2024-41119

streamlit-geospatial remote code execution in pages/8_🏜️_Raster_Data_Visualization.py

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2024-07-26 No fix listed CWE-20

TI-2024-27469 CVE-2024-41117

Remote code execution in streamlit geospatial in pages/10_🌍_Earth_Engine_Datasets.py

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01322 Published 2024-07-26 No fix listed CWE-20

TI-2024-27468 CVE-2024-41116

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option vis_params

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01322 Published 2024-07-26 No fix listed CWE-20

TI-2024-27467 CVE-2024-41115

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py MODIS Ocean Color SMI option palette

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01475 Published 2024-07-26 No fix listed CWE-20

TI-2024-27466 CVE-2024-41114

Improper input validation in opengeos streamlit-geospatial

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2024-07-26 No fix listed CWE-20

TI-2024-27465 CVE-2024-41113

Improper input validation in opengeos streamlit-geospatial

HIGH 82

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2024-07-26 No fix listed CWE-20

TI-2024-27470 CVE-2024-41118

streamlit-geospatial blind SSRF in pages/7_📦_Web_Map_Service.py

HIGH 81

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00713 Published 2024-07-26 No fix listed CWE-918

TI-2024-27464 CVE-2024-41112

Remote code execution in streamlit geospatial in pages/1_📷_Timelapse.py Any Earth Engine ImageCollection option palette

HIGH 81

streamlit-geospatial is a streamlit multipage app for geospatial applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2024-07-26 No fix listed CWE-20

TI-2026-59354 CVE-2026-86806 · GHSA-mgm6-2qqc-vwg8

opengeos GeoLibre _is_within_roots server-side request forgery

LOW 37

A weakness has been identified in opengeos GeoLibre up to 2.3.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00605 Published 2026-09-08 Fixed in 2.4.0 CWE-918

Open these records in search →