debian/python-geopandas vulnerabilities

Latest debian/python-geopandas CVEs

Newest publication first

1. CVE-2025-69662 geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

   Published 2026-01-30

   High·CVSS 8.6 EPSS 0.43%

   SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.