CVE-2026-27818
1 advisory.
npm/terriajs-server CVE-2026-27818: high, EPSS 0.42%
TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist
Action: Upgrade terriajs-server to 4.0.3 or later.
npm i terriajs-server@4.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.3 | - |
Fixed versions
| 4.0.3 |
Sources
- osv: GHSA-w789-49fc-v8hr
- https://github.com/TerriaJS/terriajs-server/security/advisories/GHSA-w789-49fc-v8hr
- https://nvd.nist.gov/vuln/detail/CVE-2026-27818
- https://github.com/TerriaJS/terriajs-server/commit/3aaa5d9717162b245ae4569232bbe7d8673c913f
- https://github.com/TerriaJS/terriajs-server
- https://github.com/TerriaJS/terriajs-server/releases/tag/4.0.3
CVE-2026-27818 · published · modified · JSON