tocsin

CVE-2026-55178

5 advisories.

npm/@geolens/sdk CVE-2026-55178: high 7.5

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Action: Upgrade @geolens/sdk to 1.2.3 or later.

npm i @geolens/sdk@1.2.3

Affected

introducedfixedlast affected
01.2.3-

Fixed versions

1.2.3

Sources

CVE-2026-55178 · published · modified · JSON

PyPI/geolens-cli CVE-2026-55178: high 7.5

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Action: Upgrade geolens-cli to 1.2.3 or later.

pip install geolens-cli==1.2.3

Affected

introducedfixedlast affected
01.2.3-

Fixed versions

1.2.3

Sources

CVE-2026-55178 · published · modified · JSON

PyPI/geolens CVE-2026-55178: high 7.5

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Action: Upgrade geolens to 1.2.3 or later.

pip install geolens==1.2.3

Affected

introducedfixedlast affected
01.2.3-

Fixed versions

1.2.3

Sources

CVE-2026-55178 · published · modified · JSON

PyPI/geolens CVE-2026-55178: high 7.5

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Action: Upgrade geolens to 1.2.3 or later.

pip install geolens==1.2.3

Affected

introducedfixedlast affected
01.2.3-

Fixed versions

1.2.3

Sources

CVE-2026-55178 · published · modified · JSON

PyPI/geolens-cli CVE-2026-55178: high 7.5

GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data

Action: Upgrade geolens-cli to 1.2.3 or later.

pip install geolens-cli==1.2.3

Affected

introducedfixedlast affected
01.2.3-

Fixed versions

1.2.3

Sources

CVE-2026-55178 · published · modified · JSON