Skip to content
OpenAdvisories

Package · npm

maplibre-gl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2026-85061

    MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

    MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collection, shifting indexes…

    maplibre maplibre-gl-js tileserver-gl opensearch-dashboards-3-dashboards-maps Wolfi npm