CVE-2026-27818

TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker to proxy domains not explicitly allowed in the proxyableDomains configuration. Version 4.0.3 fixes the issue...

rer3d-map (>=1.5.1 <=1.8.0), terriajs-map (=0.0.1) potentially affected by CVE-2026-27818 via terriajs-server (=2.9.2)

terriajs-server NPM version =2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on terriajs-server and may be impacted: - rer3d-map =1.5.1, =1.8.0 - terriajs-map =0.0.1 Source cves: CVE-2026-27818 Source advisory: OSV:GHSA-W789-49FC-V8HR...