Skip to content
OpenAdvisories

Vendor

maplibre

2 known vulnerabilities.

Products

maplibre-gl-js 1 geojson-vt 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-85061

    MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

    MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collection, shifting indexes…

    maplibre maplibre-gl-js tileserver-gl opensearch-dashboards-3-dashboards-maps Wolfi npm