{"action":"Upgrade geolens to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"geolens","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-p77j-g7h5-r2vw","id":"tcs_01M5KFSJVJHBF87B0YXBEPWB5Z","modified_at":"2026-08-19T19:30:06.739322528Z","published_at":"2026-08-19T19:22:59Z","references":["https://osv.dev/vulnerability/GHSA-p77j-g7h5-r2vw","https://github.com/geolens-io/geolens/security/advisories/GHSA-p77j-g7h5-r2vw","https://github.com/geolens-io/geolens/pull/243","https://github.com/advisories/GHSA-p23g-mvhj-jh3j","https://github.com/geolens-io/geolens","https://github.com/geolens-io/geolens/releases/tag/v1.2.4"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p77j-g7h5-r2vw","url":"https://osv.dev/vulnerability/GHSA-p77j-g7h5-r2vw"}],"summary":"GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)"}