earthdata-search vulnerabilities

1 known vulnerability in earthdata-search from Nasa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  earthdata-search: Server-Side Request Forgery

  CVE-2026-82801Aug 31, 2026Nasa

  A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request fo