CVSS 3.1
8.6 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NCVE-2025-69662
High (8.6) in geopandas geopandas. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in geopandas 1.1.2.
SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- geopandas:geopandas
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6497-prx7-gpmq | PyPI | geopandas | <1.1.2 | 1.1.2 |
| PYSEC-2026-62 | PyPI | geopandas | <1.1.2 | 1.1.2 |