Skip to content
OpenAdvisories

Vendor

valhalla

2 known vulnerabilities.

Products

valhalla 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-49294

    Valhalla has reflected XSS via unsanitized JSONP callback parameter

    Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. Versions 3.6.3 and prior are vulnerable to reflected cross-site scripting (XSS) due to improper neutralization of input in the JSONP callback parameter. When…

    valhalla valhalla