Skip to content
OpenAdvisories

Package · npm

osm-static-maps

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2020-7749

    Server-side Request Forgery (SSRF)

    This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template without escaping ({{{ ... }}}). As such, it is possible for an attacker to inject arbitrary HTML/JS code and depending on the context. It wi…

    osm-static-maps npm