GeoLibre vulnerabilities

CVEs whose affected-version data names the GeoLibre package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86806High· 7.3

2w ago

A weakness has been identified in opengeos GeoLibre up to 2.3.0

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recomme…

▾ Twilightopengeos · GeoLibreEPSS 0.45%via NVD