dfpc-coe/cloudtak Security Advisories | GitStock

high2026-07-17

CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard

GHSA-r95q-fp26-h3hc · CVE-2026-55177

medium2026-07-17

TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard

GHSA-vqrw-qphh-p34v · CVE-2026-54546