Skip to content

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

High severity GitHub Reviewed Published Jun 10, 2026 in dfpc-coe/CloudTAK • Updated Jul 17, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts