PYSEC-2026-62
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/geopandas/PYSEC-2026-62.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-62
- Aliases
- Published
- 2026-01-30T19:16:11Z
- Modified
- 2026-06-10T17:01:18Z
- Severity
-
- 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.
- References
Affected packages
PyPI / geopandas
Package
- Name
- geopandas
- View open source insights on deps.dev
- Purl
- pkg:pypi/geopandas
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.1.2
Affected versions
0.*
0.1.0.dev-a7b594e
0.1.0.dev-a91e8ab
0.1.0.dev-abb4137
0.1.0.dev-c770a5c
0.1.0.dev-fea5c40
0.1.0.dev-1edddad
0.1.0.dev-2be7de8
0.1.0.dev-2d642e0
0.1.0.dev-3ebcae0
0.1.0.dev-6c816f0
0.1.0.dev-40ec104
0.1.0.dev-53f669a
0.1.0.dev-120d5ee
0.1.0.dev-189a35c
0.1.0.dev-7788a17
0.1.0.dev-8144a45
0.1.0.dev-120828c
0.1dev
0.1.0
0.1.1
0.2
0.2.1
0.3.0
0.4.0
0.4.1
0.5.0
0.5.1
0.6.0rc1
0.6.0
0.6.1
0.6.2
0.6.3
0.7.0
0.8.0
0.8.1
0.8.2
0.9.0
0.10.0
0.10.1
0.10.2
0.11.0
0.11.1
0.12.0
0.12.1
0.12.2
0.13.0
0.13.1
0.13.2
0.14.0
0.14.1
0.14.2
0.14.3
0.14.4
1.*
1.0.0a1
1.0.0rc1
1.0.0
1.0.1
1.1.0
1.1.1