CVE-2026-82802

A server-side request forgery (SSRF) flaw exists in NASA earthdata-search 1.0.0 , specifically in the OpenSearchGranuleSearchLambda function within serverless/src/openSearchGranuleSearch/handler.js (granules Endpoint). The vulnerability is triggered by manipulating the openSearchOsdd argument, al...