Threats affecting pkg:npm/terriajs-server

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.3%	CVE-2026-27818terriajs-server · Improper Input Validation High8.7EPSS 0.3%2026-02-26CVE Database V5CVE-2026-27818 TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers. A validation bug in versions prior to 4.0.3 allows an attacker to proxy domains not explicitly allowed in the `proxyableDomains` configuration. Version 4.0.3 fixes the issue. EPSS 0.3%Vulnerability CWE-20	CVE Database V5	2026-02-26

Page 1 of 1