Skip to content
OpenAdvisories

Package · npm

terriajs-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-27818

    TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist

    TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker to proxy domains not explicitly allowed in the `proxyableDomains` configuration…

    TerriaJS terriajs-server terriajs-server npm
  • High —
    GHSA-p72p-rjr2-r439

    Server-Side Request Forgery in terriajs-server

    Versions of `terriajs-server`prior to 2.7.4 are vulnerable to Server-Side Request Forgery (SSRF). If an attacker has access to a server whitelisted by the terriajs-server proxy or if the attacker is able to modify the DNS records of a domain whitelisted by th…

    terriajs-server npm