Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to requests to internal HTTP services. This issue has been patched in version 0.23.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-01 | 1 | Disclosure1 |
| 2026-05-09 | 2 | Disclosure1General1 |
CVE-2026-42352 pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can us… https://www.cve.org/CVERecord?id=CVE-2026-42352
Post summary
The excerpt briefly notes a CVE affecting pygeoapi between specific versions but lacks details on exploitation, mitigation, or technical nature.
CVE-2026-42352 OGC API Process Execution Vulnerability in pygeoapi Versions 0.23.0-0.23.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42352
Post summary
A newly identified vulnerability, CVE-2026-42352, targets pygeoapi versions 0.23.0 through 0.23.2, exposing an OGC API Process Execution flaw. No PoC, exploit, or mitigation information is provided.
🔴 pygeoapi, Unauthenticated SSRF, #CVE-2026-42352 (High) https://dailycve.com/pygeoapi-unauthenticated-ssrf-cve-2026-42352-high/
Post summary
The tweet announces a new high‑severity unauthenticated SSRF vulnerability (CVE‑2026‑42352) affecting pygeoapi, with no PoC, exploit, or patch information presented.