Skip to content
OpenAdvisories

Package · npm

mapbox.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-1000043

    Content Injection via TileJSON Name in mapbox.js

    Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

    mapbox-rails mapbox.js npm RubyGems
  • Medium 6.1
    CVE-2017-1000042

    Content Injection via TileJSON attribute in mapbox.js

    Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.

    mapbox.js mapbox-rails npm RubyGems