@tak-ps/cloudtak vulnerabilities (npm)

2 vulnerabilities.

• @tak-ps/cloudtak npm CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard CVE-2026-55177 Fix available 7.6 HighJuly 17, 2026
• @tak-ps/cloudtak npm CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard CVE-2026-54546 Fix available 5.0 MediumJuly 17, 2026