@tak-ps/cloudtak
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @tak-ps/cloudtakpage 1 of 1
- CVE-2026-54546MEDIUMCVSS 5.0EG 5.0fixed in 13.22.12026-07-17
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL() in api/rout…
- CVE-2026-55177HIGHCVSS 7.6EG 7.6fixed in 13.10.02026-07-17
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled URL from the re…
Check whether @tak-ps/cloudtak is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @tak-ps/cloudtak CVEs against the assets you own.
Book a Demo →