IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-01-30 19:16

MODIFIED

2026-01-30 19:16

EPSS (Prob. Exploit)

0.44%

Top 63.0%

DATA SOURCES:

NVD 🔗 2026-01-30 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-28 OSV 🔗 2026-02-06

> DESCRIPTION

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-6497-prx7-gpmq HIGH

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

AFFECTED PACKAGES:

PIP / geopandas

< 1.1.2

Fixed in: 1.1.2

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

28 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

30/01/2026 19:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 9 months ago

> REFERENCES

https://aydinnyunus.github.io/2025/12/27/sql-injection-geopandas/

https://github.com/geopandas/geopandas/pull/3681