npm/@geolens/sdk CVE-2026-55178: high 7.5, EPSS 0.65%
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
Action: Upgrade @geolens/sdk to 1.2.3 or later.
npm i @geolens/sdk@1.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.3 | - |
Fixed versions
| 1.2.3 |
Sources
- osv: GHSA-p23g-mvhj-jh3j
- https://github.com/geolens-io/geolens/security/advisories/GHSA-p23g-mvhj-jh3j
- https://github.com/geolens-io/geolens/pull/234
- https://github.com/geolens-io/geolens/pull/235
- https://github.com/geolens-io/geolens/pull/236
- https://github.com/geolens-io/geolens/pull/237
- https://github.com/geolens-io/geolens/pull/238
- https://github.com/geolens-io/geolens
CVE-2026-55178 · published · modified · JSON