This talk shares results from a security review of widely used open‑source GIS libraries using a lightweight SAST and SBOM methodology. Attendees will learn how common patterns create risk and how simple, repeatable practices can strengthen the security and resilience of geospatial tools.