PyPI/geolens: high

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

Action: Upgrade geolens to 1.2.4 or later.

pip install geolens==1.2.4

Affected

Fixed versions

Sources

• osv: GHSA-p77j-g7h5-r2vw
• https://github.com/geolens-io/geolens/security/advisories/GHSA-p77j-g7h5-r2vw
• https://github.com/geolens-io/geolens/pull/243
• https://github.com/advisories/GHSA-p23g-mvhj-jh3j
• https://github.com/geolens-io/geolens
• https://github.com/geolens-io/geolens/releases/tag/v1.2.4

published 2026-08-19T19:22:59Z · modified 2026-08-19T19:30:06.739322528Z · JSON