Please report security problems privately, not in a public issue.

• Email security@geonode.com.
• Include the package and version, the steps to reproduce, and the impact you see.
• We acknowledge reports within 5 business days.

This address also covers the Scraper API, the MCP server, the dashboard and the website. The full policy, scope and rules of engagement are at https://geonode.com/security.

Fixes ship as a new version of the affected package, so please check that the problem still exists in the latest version.

To report abuse from a Geonode IP address (spam, scanning, fraud), email abuse@geonode.com. A different team handles those reports.